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184 hours finding that one bug 
142 hours of meetings 
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The new HASP family of products is the 
next generation in protection ensuring the 
highest level of security for your software- 
It provides an easy set of tools to automati¬ 
cally protect your software and implement 
new and innovative licensing options. 


^ Strongest anti-plracy solytion; 
Our powerful, 128'bit AES 
encryption provides s 
Strong locking mechanism 
that ensures you get 
paid for every copy of 
youf software. 
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^ Robust envelope; 

Automatically protects Windows 
executables, DLLs, .Net and 
Mac applications, securing the 
weakest link and ensuring your 
valuable IP remains unreachable. 
Multiple protection layers 
provide unequaled security. 
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Request a Software Deveioper Kit today at www.ahddm-com/hasp 





^ Best overall solution as rated by 
an independent testing lab: 

In KeyLabs tests, HASP HL outperformed 
the competition in security ease^of-use, 
flexibility of tools and functionality, 
and compatibiliLy across platforms 
and environments. A copy of the full 
KeyLabs report is available from our 
Web site at www aladdin.conVhasp. 


Category 

Weight 

Aladdin Senther 
HASP HL UtlraPfo 

Security 


85.1% 

eO.9% 

: Ea^ecif-use 

25% 

93J% 

77% 

Ucensing 

20% 

75% 

75% 

Flexibility of trwb 

10% 

93J% 

7U% 

and liinctionalily 

Conipalibt% acioss 

10% 

S3.3% 

71% 

platforms and 
fnvtronmpnts 

Overall Evaluation 


87.3% 

63,8% 


Aladdin 


SECURING THE GLOBAL VILLAGE 


North Amerka; 1-800 562’2543, 847-818-3800 'UK * Germany • Israel • Benelux • France * Spain • Asia Pacific • Japan 

©2005 AUddan Ul Ali riglmrpsCT^ed. Akddin and t lASPaif fE^iCenecf UademaAs of Aladdin KjmwIodqe SystemsL LM V^hkIows^MjcO^ Ljnu)i*aw!J3dffnarksof negisiWEd rrademjAsd tlicli nwpftiwlwldefs. 
























Need to find something fast? 



With c-tree 


C-tree Plus* 

embedded database engine 
offers Superior lnde;<(ng 
Technology - the Key to 
performance, data integrity, and 
concurrency, c-lree Plus offers 
direct record-oriented C and C++ 
APIs with an industry-standard 
SQL Interface that allows use of 
any combination of APIs within 
th© same application. 
Furthermore, we offer source 
code access for intimate 
programming control, unmatched 
portability, and developer-to- 
developer technical support. 

Heterogeneous Environments 

c-tree Plus and c-treeSQL” 
Servers are the perfect solution 
for your mixed platform 
environments. Mac servers to 
Windows clients? No problem. 
Linux Servers to Mac clients? No 
problem, c-tree has a long history 
of cross-pfatform development 
solutions. Byte incompatibility 
between platforms is handled 
seamlessly with our Uni format 
data handling technology. 

Low TCO 

C-tree is priced affordably, 
requires minimal hardware 
resources, and needs no IT staff 
for maintenance. If Total Cost of 
Ownership (TCO) is important to 
you, c-tree is the perfect 
database. 

Easy Deployment 

c-tree Servers are designed for 
ease of use and deployment as 
well. Out of the box. our servers 
can be installed and running In 
minutes. 

Start indexing your data todayi 


www.faircom^com 


Go to www.faircom.com/go/mteval for a FREE evaluation of c-tree Plus 
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For questions regarding sales or service, please call 
us 24 hours a day at 1-866-624-6114 
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IN THE TRENCHES * by Michael H. Harvey 


Talking Won One Man on 
THE Front Lines of Mac IT 

First in a New Monthly Series ! 


ver been to Macworld, WWDC, MacRetreats, or an Apple Certified 
Training course. If the answer is yes, then chances are you have met 
Schoun Regan. Author of the Mac OS X Server Visual Quick Pro guide 
I from Peachpit Pre.ss, editor for most of the Apple Pro Training series books 
focusing on Mac OS X and Mac OS X Server, Schoun is one of the mo.st 
powerful forces behind technical training and Mac OS X in the industry 
j today. The list of people he calls his colleagues is a veritable who’s who of 

the Mac OS X high end consulting community. His ideas about the merging 
of training and consulting surrounding Mac OS X have been accepted by 
many who listen to him speak, hire his company to develop courseware, or 
have them coasult on deployments t)f Mac OS X and Mac OS X Server. 
Arguably, he has been associated with training and Apple operating system 
software for about as long as the Macintosh has been around. We recently 
[: had the chance to sit down with Schoun and get his take on the cument state, 

and future direction, of Macintosh in the enterprise. 


MacTcch: Whtriv did you get your start in the fT 
bu,sinc.s.s, and how long have you lieen at it? 
j I Schoun Regtin; I sianed nut at Go(xiye:ir He?iearch, wlieie 
I they w'ere testing the strength and elustieity of tire 

jj niiucrkils. We were able to piny wiili all sorts of 

dangeroiLs eqtiipment, data eolleaion cards, IBM-XTs, 

■ Ibken Ring Jielworks, AppleTalk, anil Novell. It was a 

I blast. After ten years su[)|'K>rting st’iemLsis, chemists, and 

engineers there, 1 moved on, teamed am of the first 
r ACr certifiaitions, and esiafilisheti llie Mac Truinei’s, 

U and later ITlnstruction.corn. I have taught, and 

i' .sufiixFrted Mac OS X/Server iastalliitioas all over the 

I country, and .speak at many Macintosh related events 

■ throughout the yciir 

I 
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MTs Apple has Jjeen making .serious inroatls imo the enterprise 
computing space over the last few years, itow do you think 
they gtH to where tliey are nt>w? 

SR: Maid work and innovation. Tlic engineers .staited uiideisLanding 
the impoitancv of inlegration with odier plaiforms. Titey atv 
starting to listen niofe, and great things arc happening becaii.se 
of tliat. Take Ac'cess Control Lists in Tiger, for example, Tlie big 
things gel the hcadline.s but it’s ilte little things ihal 
administmtots deal with every day that change their minds. Take 
a kK>k at htlp://wwvv.apple.corTi/server/doaim Over 1200 pages 
of derailed dociirnentaiion on Mac OS X Server, FRLE. The Mac 
OS X Server team Ls heatJed up by some very forward thinkitig 
jxxjple, and it shows. Apple Certifiecl Training c-ourst^s also help 
to spivad the news that Aj^ple Ls a player in tins market. 



















MTi Wli:ii were mme of the ehiillenges diey had lo overcome to 
get wliere they are today? 

SR: Myo]>ic min(Ls(aN wiili to Mae OS X Serv'er had U>go, and 
it did very quickly. Anoilter issue tJiey had to change was 
cu.storner impassions. For a roiiiine 5(X) c ompany administrator 
to say* “We'll never liave Macs in our eoni[)any'', is indicative of 
the brger prol?lem of insular tlunking. Apple’s sales force is 
working diligently to altc.T tliat [X^rception. Ii's a lough rcxid w'iili 
plcftty of closed ckxjrs displaying “No Solicitors’* sigas. Ikil lliasc 
at Apple perseveac I recently siK)kc to a person who left Sun 
computing and lliey remarked his Apple SF. .stewed genuinely 
liufipy to go alx>ve arid Ixyond tilt; call of duty, niem are not 
so much te< hnicjl chalienges as pcisonne! ciiiillengcx Hie Icrani 
heading u|> Siiles, t^spetially for Fnterpri.st% Ls outstanding. 1 
w'oultl attjihute a significant chmge in customer mentality 
towards Mac OS X lo these people. 

MT: So flow do companies make the switch, on an Enterprise 
level, s<} to speak? 

SR: Ji s tK Jl a .simple pnxess. Getting the l>uy-in of the de|xmnient 
manager or CiO is a great start. You have a sc^dion of the 
admitiistraiive world iliat still see.s Mac’s plus ApplcTtilk 
multiplied hy messy networks txfiutls “we don't undersUind 
tllem^ 1 onc:e told the CIO of a company, w^hen sfxaking about 
Apple entering tlie laigtT Ixisiness markets, “Apjiile ckx^s n(H 
deserve my loyalty, liut tliey Itave e:imed my tespea." Somc*otie 
neecLs to ix iti front of these administrators and let tliem know^ 
that pMac OS X Seiver is here to stay. It’s tniea.‘sting to see their 
res 7 X>nse when shown what Mac OS X and Mac OS X SenxT c'an 
do. Ihe markt't is ri[Xf tor a change, and Apple kmws diis. You 
have to more hardw^are and more staff ensiin:s jol> security. Mac 
OS X Serveni are a great scan. Laptops and Mac OS X (k.‘sktoj:K$ 
am come later. ,SL‘lling the Ixirtlware is only part of ifie solution. 
For .someone to chimge over* a long-temi plan tuust lx in place 
meding die criteria I .spoke of earlier. 

M'f: What do you see as the t>umps tin the road to getting iJiere? 

SR: I would guess that the percemage of smiles of Xseive and 
Xserve RAID.s cannot come close to iPod sales. I lowever* you 
liave the opportuntiy to grow' other asjxcts of the liusiness 
off Julies of Mac OS X Serv'Cr related [products; rraining, repair 
kits, extended warrant ies, solutions, etc. When servers go in* 
Mac OS X sexm follows. Ergo, listening to customers alxxit 
issues siiiTounding Mac OS X Seiver should lx* taken 
seriously. Security is an enomtous factor Apple has fantastic 
security architeemre. Do we see that in Apple's marketing 
literature or on the web site? Apple has an Active Directory 
plug-in allowing Mac OS X to integrate sifamiessly wath an 
Active Directory domain. Why this Is not (>romoied better in 
Windows basetl l^C magazines and well sites is beyond me. 

MT: So* let's say you are king of tlie world; what woukl ymi hiive 
Apple do to imprr:>ve their (x^sition in laige settle H'departments? 

SR: Fully suppon the extended schema l>y both offering plione 
support and training to allow' easier integration of Windows 


clients. Packet signing and other similar services that Active 
Directoty offers to its clients. Spend [he numey and purchase 
Thurshy Software outright. I know that's a Microsoitee thing 
to do, hut they liave exactly what Apple needs, and iheyll 
gain some taleni found nowhere else in the indusijy. 
Develop WWl’C, a W'orld Wide Technic’a] Conference. This 
can em:ompa.ss WWDC* the World Wide Developer 
Conference and WWIT, a World Wide Information 
Technology Camfereiice, Fd love to head that up. With the 
move to Intel, lx>th aspccLs of this trinsition sht)ukl be 
explored. 71iis conference would take the YT world by .st«>nn. 
MT:Whai Ls your perception of Ajrples move lo fiie Intel 
prex'essor? Gtxxi move or bad? 

SR: t ldi. Ikty Apple stcH:k. 

MT: Thanks for taking tlie time do talk with u.s. 

SR: My pleasure, I tJrink this type of forum ts prcxlyctive. ’fhere 
are many Macintosh IT professionals out there, and I know 
many of them. You should hear some of the things ihey have 
to .say. 

MT: Ctxih W;int a jt»li? 

SJi: (laughs) 

Editor's note: Sliouly after this inlerv'tew , we actually did offer 
Schoun ilie job, lieginniiig with the Deceml>er issue of 
MatTcx’h* each month Schoun will Ik: intervaevving a Mae FF 
manager* and .sharing with you their strategies for dealing w1tfi 
their most pressing issues. Be looking for "In 'Ilie lYtmches’" 
each month in MacTech!! 


\\i\ 


About The Author 



"Honest to God, no there I was." Thus 
begins the story of Reviews MYor Mfchoe/ R. 
Horsey, a man who only wishes he wulJ have 
slept his way to the top, from his hombie 
beginnings as a heHropter crew chief in the 
t},5, Army^ serving in both the Panama 
fovcrsioo ond the first Golf War, to UC Santa 
Barbara, earning a B,S, in Aquatic Biohgy, he gained his Mac 
experience in various places, from his eariy super hero days as the 
computer go to geek in freshman dorm, on to several pofiYioirs in the 
undergrad labs on compos and with various consulting firms, to his 
current secret identity os the Senior Systems Technician at the Ventura 
County Star newspaper. Add to that other early jobs as a pizza 
delivery boy, and bouncer, and Mkhaef was perfectly poised to fake 
the Reviews fdiYor job in July 2002, wronging both wnYers and 
vendors into line to be able to bring to you reviews of cool, and yes, 
even useful products (even penning a few choice pieces himself). 
You're welcome. Contact him at reviews@mQCteikcom 
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Bonjour, Mon ami: Automatic 
Service Discovery in Tiger 


W hen Apple released Mac OS X 10.2 in August of 2002, it 
included a somewhat obscure networking technology 
dubbed Rendezvous. Nearly than three years later with 
the release of OS X 10.4 Tiger, Mac users have said au revoir to 
Rendezvous and hello to Bonjour because of a trademark 
infringement lawsuit against Apple by Tibco Software. The new 
name for Rendezvous was to be OpenTalk, which had a familiar, 
warm Classic Mac OS ring, but instead, we walk around with a frog 
in our throat, lips shaped like the Texas border, trying to emulate 
an uncomfortable accent. Every time I say the B-word 1 have 
visions of Pepe LePew sticking his head out of a doorway and 
exclaiming, “Bonjour, mon amour, embrasse-moi.” Freaky. 


Zero, My Hero, How Wonderful 
You Are... 

By i!il» siiliheacl aix>vc\ ITn probably giving away my age. I 
ga^w up wiiii liie Sc']itKj)lK)iisc k caitf){>n.s an Sauaday morning 
idtAdsion. I was csjxxtilty a fan of Multipliraiion Rtxk. whercr (he 
mulupliraiion cables wea tironglii tu (iTc ;is tiiritxin cfumiacrs. 
Zeit), of ujurse, was tile ulLra-ixjwtilxjl multiplier, ponrayetl as a 
.Hiiperlieit), complcie wiili tmisk and rape. If you’ve iKvn reading 
tills ailumn for a while, yatt ll know' tlial while 1 might ai>fx.*ar lo 
have can(X)ns on tlie bniiii, then^*s ii.sually a point, at least an 
intersection t>f BulKvinkleish niraning with sonieihing Open- 
Sourxe. At the core of Br^nlriur Is an Open SoiiR-e {syriiri.sed?) 
technology' known as Zeixxt>nf ( http://www.zeroCDnf orQ ), 

One of tlic Classic Mac OS’s (Haims to fame (and undoing) 
w'as the ease of use and automatic discovery of netW'Ork shares 
and [timers via the AfipleTalk networking protocol Wliile 
AppleTalk was excellent for small groups of Macs, ninning it on 


Yet the renewed hxTts on this taken-ldr-gnmied 
technology, no matter liow' odd the name or the freely 
assrx'iated caritxm charaaer reveals that it lias lietome 
such a Li.seful and uhiquiious lielpmaie that it's not 
difliculi to make the argument that wilhoul Bonpiir, OS 
X w'OLild be a lesser experience for everyone from the 
ra.sual iPtxl user lo tlie hducaiion Sysiems Ad min Isi rat or 
with dozens of XSer\'es and XServe RAIDs to manage. 
For exaiii[>le, ihe recjuisiie IiS-232 serial connection 
rtxjuired to configure nearly every stonige subsystem on 
tlie market from a SCISI array, NAS or high-end swatch, is 
easily dispensed with in favor of Bonjour. Just plug a 
P(>w'erB(x)k ini<> ihe Fthemei jxm on the l>ack of the 
XServe RAID, and in seconds theyTe talking all w'iih no 
manual IP configuration, and no serial port. While web- 
Ixi.sed configunition is tile norm for such devices, a trip 
la the serial pail is almost always rcc[uired to configure 
the IP addre.ss of the web interface first. 
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larj^er nt!(works aixd cjver WAN tionnuctioas required special 
planning, luirdwart*, and “seed routers/' Contemporaries of 
A[>pleTalk, NtaHtOS atid Novells IPX (Inlenietwork Packet 
Exchange) also j>rovided facilities for discovery of network 
resources via iiroadcast, In the entl, it was that broadcasting and 
lack of compatibility wiili TCP/IP, which became the darling 
standard of corponiie networks in the mid-1990s, not just the 
Internet, that dexjmed AppleTalk lo a deprecated protcK-oI. Now, 
wUh Tiger, file sharing over AppleTalk isn't just dcf^recated; it 
doesn’t work at all. Wlien Leopard's released in late 2(X)6 or 
early 2007, I wouldn't Ix^ surprised if AppleTalk wasn't 
siipE^tiried lor printing as well as file sharing. 

The Zeroconf project outlines the following requiretiients in 
achieving what it calls tlie "‘Applefalk ea.sc-of-use in IP”: 

• Allocate addresses without a DHCP server (rPv-'i Link-L<Kul 
Addressing) 

• Translate Ixnween names and 11^ addresses without a DNS 
server (Multicast DNS) 

• Pind services, like j>rinters, without a directory seiva^r (DNS 
Seivic:e Disetwery) 

• Allocate IP Multicast addresses without a MADC'AP server 
(Future work) 

A final requirement is ihai the solutions in the four areas 
must coexist gracefully with larger ctmfigured networks. 
Zeroconf proUxols MUST NOT rju.se hami ttj the network wHxm 
a mat:hine Is plugged into a large network. 

It Is important to utiderstand that the purpose of Zero 
Configurjuion Networking is not solely to make airrem personal 
computer net\^'orking easier to u,sc, iliough this is cerTainly a 
useful benefit. I’he long-ienn gt>al of Zero Configuraikm 
Netw'orking is to enable the creation of entirely new kinds of 
netw^orked products, pnxlucts ihai uxlay would simply nt>i lx 
commercially viable berause of the inconvenience and supixirt 
costs involved in setting up, configuring, and maintaining a 
network to allow' them to opentie. 

The idea here Ls to allow machines of dispamte ijpc^rating 
system to easily "finer eaclt otlier without needing to configure a 
network interface. Ihe example given at ilie Zerexonf site is of 
two jxople wanting to play a networked computer game. If Ixjtli 
are using PowerB<x>ks, it ought to lx a cinch to 
use AppleTalk for the two opponents to find each 
Ollier, but if one’s using a Windows laptop, then 
TOP/IP would lx the only common network 
proKxol (At Ic^ast prit)r to OS X), and in the 
absence of a DHCP server for tlie f)luyers' home 
network, mimual IP t:<jnfiguratii)n would lx a 
requirement for game play, and that’s something 
many casual computer users still fmd somewhat 
difficult, and a prexess tlmt game publishers 
reaUy can’t afford to suj)]:>oit witii their in-house staff. Part of the 
soluiion lias Ixen to use "uacker’* sc^rv'eis to register g;mie 


players, but that tkxsn't really address the issue of an ad-hfx 
network of two gamers whf> might not have an Internet 
connection at their di.s|:>osaL 

It's pretty mucli taken for granted now' tJiat physically 
conner'ted computers (this includes those on wireless— 
Airfxm—networks as well) can discover each other’s services. 
The Sony PSP (PlayStation Portable) feamres ad-htx B()2Jlb 
support, the same as Apple’s original Aiqx>rl implementation 
that allows players running live same game to “find" each other 
when in range. 

Life Without a Serial Port 

“Entirely mw kinds of netw'orked produtis. . is exactly 
the promise dial the XServ^e KAID fuiriits in allowing itself to 
(‘ommunicate without an a.s.signed IP address over an Eiliernct 
connection, as well as an XServe in headless setup mode. 
Airport base stations, iTunes music libraries, iPlioto libraries and 
more jt4s( show up to those hK)king for sucit services. Not 
surprisingly, the very first devices to take advamage of Zeroconf 
cafvahilities were network printers, which are often a network 
admin's worst nightmare when it comes to assigning static IP 
addres.ses. lliere's nothing nmre fiiistrating than standing over 
a harchto^read fCD screen tapping on little biiuonsrhat require 
you to C 7 de from zero to 25S jusi because you can’t go d(mm 
cis well as up. While printers Jjave gotten better in that 
department (HP, that mciuis you), it’s not unusual la run into 
printers left [bulling IP addresses via DHCP because someone 
doesn’t want to navigate ihe counter-intuitive menu iree on a 
Liny LCD screen. 

Much of Ikmjoufs zero configuraiion iiuigic lies in what's 
called ’iPv4 Link-Local Addressing^ which consists of IP 
addresses in the lf>9.2S4.x.x network range. Regardless of 
wivether a Mac or another device on a network hii.s either a 
manually ^Ls.signed or DHCP a.ssigncd IP address, all OS X 
computers maintnin a l69^254.x.x Liiik-LfX’jil address in their 
routing table in die event that a device witii Link-Local addressing 
only show's up on the network, first ixilling other machint's tt> 
make sure it gets a unitjue address. Using the nestat -r 
command to tlump die routing table tf> .standard output reveals 
die Linkdjxvil network destination: 


Should the DHCP server on the network fail, iCs likely 
that Mac OS X clietits could continue priming and even 
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mounting file server volumes vi.i Bonjour To see if a 
cumputLT is using a Link-Local address instead of an 
assigned IJ^ address, check the interface in the network 
preferences. 



Figure K Litik-Local IP Address 


Even with this self-assigned Link-L<Kal IP address 
(which is usually taken as a sign of trouble by those 
entrusted io maintain networks), its still possible to do 
business as usual, provided that clients connect to the 
Bon jour name of the server, which is set to 
“Computcrname.locar by default. 


O0O 


Connecting To Server 


Connecting to af{>://dual2ghzJocal... 

^ ^ ^ ^ ^ ^ ^ ^ 


Figure 2. Connecting to an Apple File Server using Bonjour 

Many Windows 2000 and 2003 Server networks are 
mistakenly set up with an internal DNS domain ending in .Itx'al, 
which of course interferes with Bon jour .service discovery. 
While it makes s<nnc sease to some (not to me) to use an 
internal domain name that's “not retil,” (mostly Ix-causc people 
are of afraid of, or don't under.stand how DNS works) it miglii 
Ix" a Ixtter idea to use Jan or .intenial instead of .local, if it 
Ix'come.s apparent that tlie Hon jour Jociil extension is 
interfering with Window^s Active Directory^ services, it's easy to 
permanently (but not irreversibly) disable Bon jour via the 
following launchd command; 

lauiichctl unload 'W 

/Sys tem/Li b ra ry / LaunchDai^iiioiia /com. appls. mDNSRe^ipondor. p list 


mDNSRespondcr 

While Bonjour might exist on most J'CP/IP networks in 
the shadow^s of the routing tabk% or as a stepping-stone to lielti 
facilitate conneciions Ix^tween Macs with DHCP or manually 
assigned IP addresses, it s also very useful in other situations, 
such as mass tie ploy men ts, in conjunction with Apple's new 
multicast ASR (Apple Software Restore) capability. For 
example, when rolling out many new' compulers, it’s 
sometimes desimble to simply plug them into an isolated 
switch, bool them frtjm a custom (mjrmally hidden) boot 
partition, install CD or DVD, and start a multicast restore 
prcxess with Bonjour enal>!ed. All thafs needed is the Bonjour 
name of the miiltica.st server Mac, 



Figure 3. Mac HelpMate Multicast ASR Settings Tab. 

One of the reasons I wrote Mac MelfiMale w^ns to make the 
mvilticast ASR pitx:ess easier to conligure, twe-ak, and manage. 
Note that the ASR URL tasr://Tno.stsvrJcK'al) usc^ Bonjour to kx:ate 
the IP address of the server hcjsting the multicast dam stream. 
Each client simply needs to know that CRL, and liial’s all. With a 
liiile extra work, it might lx (x>ssible to add the ability to browse 
for multicast stream.s on the ASR clieril as well. Jhe mechanism 
that allows OS X appliaaions and a^rvices to use Bonjour is trailed 
tht' mDNSKesjionder, and ti*s Open-Source softwaa" available for 
download at httPi/Zdeveloper.apDle.com/darwin/orQjects/bonjour . 
Ap[>le's not only busy building Bonjc^ur into nearly all of its 
signature upplicutions on OS X and jielwork scjvice.s on OS X 
Server, ti's also providing Lin easy w^ay for developers to include 
ItoiijoLir funt'iionalify in their software and hartlware products. 
Networft-enabled [)rtxliKis am ea.sily use the Bonjour source 
cixlt' Hi locate servers and pt:ers. SomewJiat logically> the 
inDNSHesponder uses DDF (User Datagiam l^rntwol) port 3353, 
wiiile traditional DNS luses TCP (Xtn 53, A tjuick line in the 
Terminal shows il, ears prickc*d, li.stening for connectitjns: 

DuulZghz:'^ d€an$ niitiitrit a|gtep 1 mdn 

U(Jp 4 0 0 *,indns ‘ 

And a cjuick grep of /etc/se:vices reveals: 

(lean$ cat /stc/servlcpalgcep 5353 

nidns 5353/udp § Multicast DNS 

iiidns 5353/tcp # Multicast DNS 

One of the first large Open-Source projects to use the Apple 
mDNSResponder source code Is KDE (K l>esktop Envirtmment, 
http://www.kde.org/) 3-4 for Lintix. KDH is a very^ popular 
Desktop, Office an<i Application bundle lor Linux workstations. 
Although there are plun.s for inlegrating Apple's Bonjour .source 
Lxxle more lightly into KDE, Rjr now the Ixst Ixnefit is the 
discovery of shared X Windows desktops (.something that OS X 
has yet to offer txyond simple screen sharing). 
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Figure 4. Howl Service Browser for Linux. 

Intereslitigiy cwaigii, tlx- KDK developers actually had a 
ctu>ice of which inDNSResponder to u.sc. Besides Apple's own 
Bonjour, there’s also the parallel Open-Source Howl projcxi, 
which implements almost exadly the same hmeiionality for OS 
X, Windows, and many types of Unix, hut with a URL (GNU 
Puhlic License) and its own ctxlc base. Interestingly enougli, 
Howl (http;//www.porchdogsoft.com/produas/howl) also offers 
Zerexonf for O.S X, which is available in the form of a Kink 
iastallcr package < http://fink.sourceforge.net ). 


New Shell 
New Command... 


Connect to Server... 


Show In Finder 

Hide 

Quit 

Figure 5. "Connect to Server..." in Terminal Dock Menu. 

itie Howl brow.ser window is strangely reminiscent of the 
Network Browser applictition that shipped with M.ic OS 8.S and 
9. However, the Network Browser used SLR (Sitrvice LtHiition 
Protocol), .an older .standard mo.srty used by Novell. While it’s 
not completely obviou-s, such a browser exists in OS X, hidden 
in the Dtxk Menu of the Tenninal application. To acce.s.s the 
brow.ser, hold down the control key and click tm die 'I'erminal 
icon in the D(xk or use the right button of a two-button mouse 
and wait for the “Connect to server’ dialog to appc*ar. 
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Figure 6. "Connect to server" Dialog. 

fl's quite interesting to note ih;ii the only appCiimnee of a 
**browserisli" interface is Itere, for services tliiit many would 
ne\*er truly consider randidates for Bon jour-bail ion, hut for 
iliost' network admins that might have kept a slim of manually 
assigned IP addresses at their desk Hj ssSi into the Mlics lliey 
manage, it’s most wek'ome! Por those on networks with DHCR 
a ping sam of the sulinet, followed by a reatling of the arp 
cache anti a scrij'Jl to [lin machine names tinto the Ethernet 
addresses was necessary: 

Dual2ghs':'' deati$ ping ‘C I 192,ifift.0.25^ j arp 'a 
?jm 192.168.0.255 (192.16S.0.255): 56 data bytes 
6^ byies frciin 192.168.0,S7 j icrop_a€q“^0 ttl-66 ti!HP“0*l49 ms 

192.168.0.255 ping stnilsiics — 

I packets traTisTQitted* 1 packets received, 0% packet loss 
round trip mJn/avg/iiiLiE = 0.149/0,149/0.149 ms 
7 (192.168,0.1) ai 0r0;94:83i34:68 on raO tethernetl 

7 (192.J68.0.84) at 0:3:93:be:42jha on enO [etharnetl 
? (192.168,0,86) at 0:5;2;71:0id5 un enO lethernetl 
1 (192.168.0.255) at ff:ff:ff:ff:ff:ff on enO fethetn^tl 

Also interesting is the abilily to ping the 
mDNSResponder on eac h Mac OS X conipuier by using the 
iiHiltit a,st broadcast address: 


DNS-SD 

While the mi)NSEesponder could he considered to lx tlie 
engine dial connects the miiUicasl, Link-Lcxal, and IPv4 
addresses, making it easy for unconfigured a)iii[)uters to talk to 
each other as well as the configured coinputers on their local 
subnet, it’s the DNS-SD (Service Discovery) pan of Bon jour (and 
Rendezvous, iLs predec essor in name) that really brings Ronjour 
technology into the sjiolJighi (symlaol trash) of an OS X user's 
daily interaction with their network, 

Wlien OS X 10,0 was released, SLP (Service Ijocalion 
Protocol) and AppleTalk were used to advertise file sharing 
resources on the local network. While SLP was a decent 
method of browsing for servers, there were some significant 
problems. Configuring the SLP DA (Directory Agent) for the 
local netw'ork wasn't very straightforward, not to mention the 
infamous issue with Iuiita]>s broadcasting multiple instances of 
their presence on tfie loail network for each IP mMress they'd 
had for any location d^ey d ewr visited. Tlie solution 
was to ilelete the /var/sl(>,regfi!e w'hich contained the SLl^ 
registrations for each of those IP addresses, 

OS X 10.3 marketl a turning (x>int it\ the fact dial SIP was 
depiecared in favor of iiiDNHRtrsponder and Rendezvou,s, Today, 
Tiger Servers configuTed as Ojxn Directory Masters, it’s even 
possible tt> numitxilate the lk>njour bit)wsing views of iminaged 
clients, 'ibis capaliilily, though not very well dociimenlcd at this 
point as far as lx)w the backend icclt works, is significant in that it 
u-sesa managctl DN.S-SD capability to contrt>l wha! OS X clients see 
w'hen browsing. Not only <Tin the M;maged Network Views be 
carved up inio virtual and logit^al segments, it's even ptxssible to 
ccjntrol which serv'itvs the clients can bniwse for, DNS-SD hmwses 
for and annoimc:es rtgistered service tyix-s. 

Some IT managers with a stani-paranoid security fixus are 
of tile opinion that the DNS-SD sc^rvtces advenised by Bonjour 
can constiiuie a security risk. Alihougli OS X dtxsn't provide a 
global browser for all tonipuiers on the network, tiiere is a 
freeware utility called "Bonjour Browser" available at 
http://vvvvw.tiidesoft,com/Pfograrns.htnil that scans the nervx^ork For 
registered Bonjour sc'rvicc^s and displays them in a window. 
Akliough it s not of much practical use, it doe-s give away which 
iiKichines are listening for different tyjK-s of connections (file 
services, ssh. etc,) allowing for ptuendal evildoers to gel qinck 
down-and-diriy looks at who’s offering what netw'ork 
services. Sccurityf concerns aside, its aljsohilely amazing to 
see just how dcvfdy integrated Btjnjour us in OS X and now 
diverse the DNS-SD sendees it supports have ixcome. 


OtiaUgh^j^/aesktop 8ean$ ping 224,0.0,251 

PING 224.0,0.251 (224,0.0.251); 36 data bytes 

64 bytes from 192.163.0.8/: i€iiip_seq“0 ttl^4 rliio“0.715 ms 

64 bytes from 192.168.0.128: iciiip_Eeq“0 ttl“64 tiPie-107,39 ms (DlTFt ) 

64 bytes froin 192.168.D.86: i{:iiip_Eeq“l ttl"64 ti4Be=Q,435 ras (DITPI) 

64 by tea from 192.168/0. B5: icmp_sefi”t 111=^64 titne=0.505 ms (DtlPli 


Note that the response is from "normal’* internal IP 
addres.scs. ma from the multicast or the Link-Local address. 
In this respecL, itiDNSHesponder acts as a ''helper" in 
locating the lFv4 address in the routing tables of tho,se 
computers running Bonjour on the local subnet. And, if that 
were all Bonjour were capable of, that might be good 
enough. 
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Figure 7> Bonjour Browser Application Window. 


ir,s prL‘[Ly safe to say that Appk* has a rcgisterfd DNS-SD 
f>rc)UK.’ol tor each major service that inns on C^S X nind OS X 
Server, as w(‘ll as at least one to advertise the presence of any 
Apple hardware produd with a network (>ort, such as XServe 
RAIDS and Airport base snitions. DNS-SD regisiralioas are in the 
followanj* tbrrnal: ^serviceiuiine.Jqi or _serv'icename._ydp. A 
complete list of DNS-^SD registraiifins, inclutling instritclioas for 
dcvelt>peni t>n how' to register a senicc for their application or 
hardware devices, is available at the DNS-SL) prttjetH wellsite: 
http://vwvw.dns-sd.orQ/ServiceTyp &s.htmK 

It's always inteiesting w4ien there’s a mistake in the man page 
of a command in OS X. SoineLiines, those errors are trivial oiher 
times they am noi so trivial Tor example, the man page for the asi 
comma nil lists the suggested deliu li mukicast address as 
22100.123. However, as we learned from experience, and ihis 
article, I3onjonr reserves that network range for its own use, and 
using that .siime network range for mukiiust asr Ls a very fiad idea 
(think network crasIvK In a similar, but less critical vein, the man 
page for the dn.s sd command line tool suggt^s that the 
command first apjxrared in OS X 10.5, wlen in reality, it's the 
dns_sd .h header lilirar^' that's Ixrjng referenced, as the corntruind 
line UxjI is nowhere to Ix" ft>und on an OS X 10.5 I'x^x. However, 
copying the /usr/l)in/dns-sd tool horn and OS X 10.^ iasiallation 
will work just fine. The das-sd command line itK>l is intended as 
a heljKT utility for developers wanting (o test Bonjour servic'cs. Inn 
it can also register a service as w'ell a.s browse for one. 

RememiKT llic Mac HelpMate asr multicast window in 
Figure 3? Well, it s actually possible lo (jrowse for the multicast 
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stfwr usin^ ific dn,s-sd comfnand line tm>l, even if Lhe Bon jour 
n.ime of the server is unknown. Here’s how ic works. First, it's 
ncfcssar^' to know^ the registration name ot the clns-sd service. 
For niulikasi ASR, it's .simply asr: 

DuaI2ghz:'^/DciskLop dean$ ,/dns-ed '■E ar.r»_tcp 
Browfiing for _asrH_tcp 

Ti mod tamp A/R Elags if Dontain Service Type IriStance Name 
6:49r28.901 Add 2 A local- _asr»_tcp* nostavr 

Or^ for Apple File Servers, ils afpovertqi: 


It's also possible to register an instance of a service on the 
network with DNS-SD as well: 


proKKoIs for browsing those networks keep developing. As 
Open Directory tniUures, Ifonjoiir must keep pace. 

Even before Bon jour official ly sii ppo ned multiple subnets 
or wide-area serv'ice discovery, there were attempts to bridge 
Rendezvous over two network augments. Tlie Rendezvous 
iVoxy project ( http://ileech.SQurceforQe.net/ ) originally sought a 
way to allow sharing of iTunes music lit>raries between subnets- 
but jxrojile found out pretty quickly it cotdd lx: used to 
advertise printers, servers, (jr just alx>ut any other Rendezvous 
service, Tlie developer even released a 
Remdezve^us proxy for Windows. Conhguring 
wide-area supp(>n for Bonjour at this time is still 
somewhat experimental, however, Apple hits 
provided a few white papers detailing the theory' 
lx:hind ninning a Bonjour DNS Domain over the 
Iniernet, as well as spcdFic insinictions at www.dns-ds^Qfg > 
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Panther 


moiatfsvr nio3tadmin$ dnS'Sd -R “My Teat” _ht;tp-_tcp - 80 
pij L [)=/ path - to - pa ge * htn 

keg3storing Service Ky Teat,.http-_Lcp port 00 path^/path-tB* 
page. htm 

Got a reply for My Test*_hrtp._tcp.local,j Name now 
reglatered and active 

Pm Bad, Pm Nationwide 

Beyond the gradual adoption of mDNSResptindcr and DNS- 
Si) [echnology into other OjKrating Sy,stems .such as Linux, Apple 
has primed the pump, so to s[X"ak, by offering an "^orikial” 
Bonjour implemeniation for Window's, I use Apple's Ikmjour for 
Windows whenever setting up lionjour-capiihle printers with 
Windtnvs W and 2(XKj computers, ft's far simpler than creating a 
netw'ork printer aUatiied to a sender or a local TC'P/IF [kmI on the 
Windows lx)X: it's even easy enough for an end user! It’s a little 
known fan, however, that Ikmjour for Wtntlow's enables the full 
suite of Bonjour rapahilities, not just printers. 



Figure 8. Bonjour Logo. 


IVrhups the biggest (and most unheralded) cliangc in 
lion jour, lx:sides the name frtxii Panther to 'I'iger w^as the 
addition of w'ide-area (and multiple subnet) DNS-SD advertising 
via Dynamic DNS (T[xlaies and uniat.si DNS queries (niullicasi.s 
aren ! alkwed on the luteniet with a few exceptions). Ltst 
month, (MT 21.10) 1 wrote about emeiging capabilities for more 
coEiiplex Q|x*n Directory deployments via LDAP Oils 
(Org:iniz;tik]nal Lhiits) and DACs (Directory Access Controls). As 
Directory' Service deployments get more complex and spread out 
over wade-arett networks, it's also necessary ifiat the discovery 


In Next Month’s Source Hound 

In next month's column, Pll acUtally set up a wide-area 
Bonjour DNS Server, see how' well it works, then look to see if 
it’s possible lo iniegntie oiir new DNS cjj)abilities into Apple's 
Open Directory LDAP server, insieavi of using BIND. Fll eitlier 
be singing like the ZZtopsters, or mayl-x^ singing soprano, 
depending on liow' it gtx^s. 
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b^/enm. 

Did you find this article helpful? 
Imagine how helpful a years 
worth of articles would be! 
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rf you are a systems adminisLralor, you know that iiiail 
servers worldwide are saiirrated liy vims traffic, 'fhere are 
stEiiple, powerful ways to add vims filtering to a Mac OS X 
Server-based mail server. In order to block, remove, or 
disable harmful content in inconiinjr and outgoing email. 
Because Mac OS X Server is a UNIX-based system, there is 
a wealtli of freely-available open-source software that you 
can download and use, including vims-fillering tools. 
Keeping yf>ur email clean of viruses is always a gcxxl idea, 
especially if you have a heterogeneous network—infected 
email can i>e passed through ycnir server to infect machines 
running other operating systems. With ilie tcxjls discus.sed 
in this article, keeping your email virus-free is c^asy, free 
and customizable. 

This anicle .steps you through ihe installation and setup 
of some widcly-used tools: Perl-based Am as vise!-new, Spam 
Assassin, and ClamAV. Tliere are other, similar open-source 
ttx)ls available, but completing this exercise shows you one 
way to keep your mail server clean of vimses; you can iry 
other solutions, as well. 

Installing Amavisd-new 

Amavisd-new is an inLerface that runs lietft^een Postfix, 
the mail server software tliat comes with Mac OS X Server, 
and the virus filtering software that we will download and 
install. Amavisd-new accepts me^ssiiges from Postfix and 
passes them along .securely to any of several available virus 
filters. Here, we will configure Amavisd-new to work with 
the ClamAV scitnner (also available for download at no cost); 
but the technique discus,sed in this article can l>e used widi 
other virus-scanning tools as well. 

To gel Amavisd-new, which is Perl-lxised, ninning on 
Mac OS X Server, the first step is to download a bunch rrf 
Perl modules that il reqLiires. This is most easily done from 
the command line, via CPAN: 


-\ 

undo Esh 
epan 

Note: dliese instructions kive you .switch to the z shell, 
you can choose to use unotlier shell if you prefer. 

Tlien, all on one line: 

install Archive::Tar Archive::Zip Comprees!:Zlib 
Convert;lUUllb Digest::WD5 Digest::SHAl Net::Server 
Not::SWTF Time: :HiEes Unicode: :Map arsitadei : String 
Unix::Syalog Mall: :SpaTaAasasain 

This takes a fair while lo prixess. We watch the 
tenuinal to monitor progress and to watch for any errors. 

One package needs extra encouragement: 

force install Convert::TNEF 

And finally, when everyahing is dtjwnloaded and 
installed: 

quit 

Note: if CPAN hasn't previously Ixx^n configured, it 
will ask for setup details ai the beginning of the session, 
you c'an either agree to follow and install any preret]uisiLes 
that imy lx axiuesied, or you can type o conf 
prerequisites_policy folkw at the beginning of the 
session to do so automatically. 

Then we download another prerequisite package, 
MIME-Tools 6.2, which as of this writing isn't available 
through CPAN. We untar, build, and install it; 

mdo zsh 

tar xzvf MIME-tools-6.200_0?.. lar . gz 
ed MIM-tool;!-6.200_02 
perl Hakefilc,FL 
make 

make install 

Next, we need to install i!ie Berkeley DB. Mac OS X 
Panther ships with the lierkeley DB versicin L8, fjut for this 
process, we need a newer version, 2.0 or later. If you don't 
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insull vemian 2.x or newer, you will get an error me^tsage later 
on when you are installing the Perl modules. 

Download the new'est version 4.2.52 source (or whichever 
version you chciose, 2.x or later), from Sleepycat Software. 

Copy the tar file to your working direcU^ry and untar: 

# cp db*4.2.52.KC.tar .£2 /usr/local/src 

# cd /usr/local/src 

I tar 'zxvf db‘4.2.52.NC.tar. gz 


Go U) the [)uild directory and perform the standard build 
ritual: 

# ed db’4.2.52.NC/build_unix 

# *,/dlat/configure —pref±x*/usr 

# make 

^ make iuHtail 

This should install BerkeleyDB, including the libraries 
needed for the BerkeleyDB.pm Perl module. 

All the prerequisites are now in place. We now use 
Workgroup Manager to create a user and group, with the former 
in the latter, both named arnavied. Amavisd-new will run as tliis 
user, because running it as root is unsafe and l>est avoided. We 
assign the user a home directory of /private/var/amavisd, 
and adjust dial directory's pennissions from the command line: 

cbovn amavlsdramavlsd /private/var/amavis 
chmod 750 /prlvate/var/amavisd 

Amavisd-new also wants a directory in which it can 
quarantine infected email: 


mkdir /private/var/virusniails 

cbown atnavisd : amavisd /privste/var/vinjsinails 

chmod 750 /priyate/vair/virusinails 

mkdir '-attiavisd/tmp "'amavisd/db 

Now we are ready to install Amavisd-new. Still as the 
supenxser, download the latest stable version and simply untar it in 
my working difector>\ Then place die Perl executable in 
/usr/local/bin: j 

cp amavisd /u^r/local/bln 

and place its config file in the /etc directory: 

cp amavifld♦conf /etc 

Next we need to edit /etc/amavisd. conf just a bit to 
reflect the setup of our server. We find the line defining the 
$myhostname variable, and set it to our server’s hostname. 
Likewise, we set $daemon_hotne and $daemon_group both to 
'amavisd\ tlie name of die user and group under which the 
daemon Amavisd-new will run. 

'Ihere are numerous other settings in this file, which it’s well 
worth familiarizing oneself with before rolling out a pRxluaion 
iasiallation of Amavisd-new, but the default settings work for now. 

We can briefly test that die installation has worked, by 
becoming the amavisd user and running it in debug mrxle, 
which displays verbose status messages: 

su amavisd 

/usr/local/bln/amavlsd debug 

It gives US a scroll of output as it loads aU its Perl mtxlules, looks 
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for scanners, and finally says ^'parcnL neady’ for children." At this 
ptant we stop the ninning process with Control-C, and pR>ceed. 

AmavLsd-new Is installed, but it is just a framework for virus 
scanning: diere is as yet no actual scanner in place to do tlie joi>. 
AmavLsd-new can interface with any numl)er of scanners—a 
complete list is given at the end of the amavisd. conf file. If a site 
already has a lic'easc to use a partiaiLtr compatible scanner, 
Amavusd-new can handle it. Here, we use the free scanner ClamAV. 

Installing ClamAV 

The scanner ClamAV is a free antivirus package that 
includes several useful features, including easy integration with 
mail serv^ers, and schptable automatic updating of its vims 
database. I^t’s describe how to install and use it to detea and 
filter mail vimscs. 

Here is how to insiaJI ClamAV. Tt will am constantly to 
process the d;ua that Amavisd-new feeds to it. Running ClatnAV 
as rtx)L is dangerous and leaves my server o(>en to the risk of 
intrusion, so instead, we run it as the user amavisd, which we 
created in the previous section. 

In order to verify the digital signatures of updates to the 
virus library (and hence prevent forgeries and erfQrs)^ ClamAV 
needs GMP, the Gnu Multiple Precision Arithmetic Library. We 
download, unzip, and build this package: 

sudo 2sh 

tar xzvf gmp-4.1.2.tar.gz 
cd ainp-4.1,2 

./configure j make ^ make install 

(If you have Fink installed on your system, you can install 
ClamAV even more easily with the Fink command fink 
Install gmp). 

Next, to iastall ClamAV, we dow^nload die latest stable 
source package from SourceFoige. Untarring it in our working 
directory as the superuser, we then cd to the source directory, 
build, and in.stall it, using the familiar process: 

tar xzvf elaniav'O . .1 .tar,gz 

cd clamav 0.65 

./configure -syscQnfdir=/etc ^wltb-uaor-afflavisd -with' 

group”amaviad 

make 

make install 

llie special Gags to ./configure set the location of the config 
file, and the user and group under which ClamAV will execute, 
After the build process is over, we test the newly created ClamAV 
executable on a handful of sample viruses that are lutndily 
supplied in the source dtrcaory: 

/usr/local/bin/clamscan ./teat/test * 

It finds five viruses: 

./test//testl: ClamAV-Test-Signature FOLfND 
./test//test 1.bz2: ClamAV-Test-Signature FOUKD 
./t6flt//teat2.badextr ClamAV-Test-Signature FOUND 
./test//test2.zip: ClaraAV-Test“Signature FOUND 
./test//tests.rar: ClamAV-Teat-Signature FOUND 

- SCAN SUMHARY - 


KnowTi viruses T 10131 

Scanned directories: 1 

Scanned files; fl 

Infected files: 5 

Data scanned: U.UO MB 

I/O buffer size: 131072 bytes 

Time: 1.796 sec {0 mis) 

Tt doesn't succeed in finding die virus hidden in 'a RAR file— 
to do dial, we need to install an unrar too—l>ui since the 
daemonized version of ClamAV (which Is what we are going to 
be using) can't handle RAR files regardless, dial doesn't matter 
for our purposes. 

With tiiat done, we next test ClamAV’s automatic database 
update tool, Freshclam, by typing: 

/usr/local/bin/freshclam verbose 

Freshclam connects to the virus database and downloads 
any updates that may be waiting: 

ClamAV update process started at Mon Sep 20 17:25:16 
2004 

Connected to database.clafflav.net (128.121.60.235). 

Reading CVD header (main.cvd)i OK 
Downloading main.cvd [•) 

main.cvd updated (version; 12, sigs: 11867, f‘level: 1, 
builder: tkojm) 

Connected to database.clamav.net (128.121.60.235). 

Reading CVD header (daily.evd): OK 
Downloading daily, evd t'*] 

daily.evd updated (version: 67, algs: 97* f-level; 1. 
builder: tkojm) 

Database updated £11964 signatures) from 
databane.clamav.net £128.121.60.235). 

We want Freshclam to run periodically on our system, so 
we are assured of always having the latest virus definitions. So 
we add the following line to /etc/watchdog.conf, to start 
Freshclam automaticaJly. TTie "-c 4" tells it to run four times each 
day, and the -u clamav causes it to run as the clamav user 
rather titan as rtKit; 

freshclasi:respawn;/usr/local/bin/freshclatii ‘C 4 -u clamav 
# Freshclam daemon 

Optionally, we cun add line "-I logflle" option to Fi^dam, 
which causes it to log all of lis activity to the file .specified in logfile. 

Putting It Together 

Now both CLiniAV and Amavisd-new are installed, and 
ready to work together. If we once again run Amavisd-new in 
debug mode: 

su amavisd 

/uer/local/hlu/amavisd debug 

it now tells us "Found secondary av scanner Clam Antivims 
- clamst^n at Aisr/local/bin/clamscan” 

The team is ready to go. We will keep Amavisd-new 
running wdule we test die Postfix setup. We now need to hook 
our scanning setup into Postfix, so it can liandle die mail for our 
server. We will make two manual changes to the Postfix 
configuration files. Note that .subsec]yent changes to die mail 
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setup imde using Server Admin may overwrite these manual 
changes. First, we stop the Postfix server if it is running, using 
Server Admin, 

Next, we open a new terminal window (leaving Amavisd- 
new running in the previoirs one) to edit /etc/postfix/master.cf, 
and add the following lines to the end of the file: 

smt p-amavis unix - - rt - 2 I mtp 

o smtp_data_done_timeout=1200 

127*0.0,1:10025 inet n ■ n - - smtpd 
'0 content^fllte^r^ 

‘0 local_reclplent_maps^ 

-Q re1a y_ re c1pient_ma p s“ 

-£> siiitpd_rest]:iction_claaaes= 

- 0 sj!Dtpd_client_restr ictiona” 

-0 snitpd_helo_re5trictione“ 

-q snitpd_sender_restrictions^ 

-0 

smtpd_recipisnt_restrictlons^permit_mynetVQrks, reject 
'0 iiiyrLGtworks“l27 *0^ 0.0/8 
-0 striet_rfce21_envelcppes“yGa 
-o j?intpd_error_sleep_time=0 
0 smtpd_£oft_error_liTiilt=1001 
0 sjiitpd_hard_error_l inti t”l 000 

That creates the definition and settings for the Amavisd- 
new content filter in Postfix, We tell Postfix to re-read its 
settings: 

postfix reload 

and test that Postfix is listening on port 10025: 

telnet localtiost 10025 

It should say something like: 

Trying U7.0,0.1. . . 

Connected to localhost, 

Escape character is "^1'. 

220 server.local ESHTF Postfix 

We also check that Aniavisd-new is listening on port 10024: 

telnet localhost 10024 

Trying 127*0,0.1... 

Connected to localhost. 

Escape character is 

220 [127.0*0,1] ESMTP aTnavisd-nev service ready 

Now we want to tell Postfix lo route mail to this newly 
defined filter. We ad<i a line to the end of /etc/postfix/main,cf: 

content_filter=si!itp ainavis: [127*0.0.1] : 10024 
raax=use=10 

'fhis instructs Postfix to .send all mail to the Amavi,sd-new 
filter. Once again, we type: 

pcfitfix reload 

to activate the new setting. Now Amavisd-new is filtering 
all our mail. We send a sample mc.ssage to my user account 
on the server, and indeed when we receive the message it 
contains the header 

X ■ Virus - Scanned: by amavlsd new at myaerver. goid 


showing that the message has been successfully processed. 

Configuration 

Tile README.postfix file that accompanies the Aiiiavisd- 
new distribution provides detailed information on fine-tuning 
the setup of Amavisd-new and Postfix. Settings for Amavisd* 
new can be adjusted in /etc/amavisd * conf—in 
particular, the filteris behavior when it finds a virus can be 
configured. The default setting places virus-infected email 
messages in the quarantine directory, /var/virusmails. 
Notification options can be changed, viral mail can be .simply 
deleted or bounced, or alt viruses can be redirected to a 
specified mail account. 

ClaniAV's settings can be tuned in * /etc/clamav. conf. 
In order to start Amavisd-new iiinning automatically when 
the server is starred, we add the following line to 
/etc/watchdog*conf: 

amavlsd: respawn: su atnavlsd -c /usr7 local/bln/ainavisd 
Then we ires tart watchdog with: 
sudci killall -HUP watchdog 

ClamAV doesn’t have to be started sepamtelyj as it is 
triggered by Amavisd-new when needed. 

The log files for any captured viruses are found in 
/var/log/syscan*log. 

Resources 

MIME-tools-5.4l7 

htlp://se3rch.cpan.org/dist/MIME-too[s/ 

Sleepycat Software 

httD://www.sleepvcat.cofn/download/index.shtml 

Amavisd-new, the laio.st stable version 
httD://www.ijs.$i/software/amavisd/#download 

ClamAV 

httD://www.clama^.ngt/ 

ClamAV, the latest-stable version 

httD://DrdQwnloads.sourceforaE.net/ciamaW 

Gnu Multiple Precision Arithmetic Library (GMP) 

http://www.swox.com/ornD/index.orio.html 

Fink 

littp://fink.sourceforge.net/ 

Unrar 

http://unrafx.sourcefQrgg.net/ 
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QUICKTIME TOOLKIT • by Tim Monroe 


State Property 


Working with QuickTime Properties and Property Listeners 

■ n the previous QuickTime Toolkit article (“The Informer” in 

■ MacTech, October 2005), we took a look at the QuickTime 

■ metadata functions, which are a replacement for the existing 
user data functions. We saw that we can use the functions 
QTMetaDataGetltemProperty and QTMetaDataSetItemProperty to 
get and set metadata item properties, and that we can use the 
function QTMetaDataGetItemPropertyInfo to get information about 
a metadata item property (such as the type or the size of its data). 




Introduction 

You should get used to this partem of 
function naming: SetProperty, GetProperty, 
and GetPropertylnfo. 'I'hat's l:)ecausL\ as of 
QuickTime version 6.4, tliis is now the prefened 
pattern of naming for functions tlial inspect and 
set properties. QuickTime 6.4 introduced the trio 
of functions QTSet Component Property, 
QTGetComponentProperty, and QTGet 
ComponentPropertylnfo for working with 
component properties. It also introduced the 
functions QTSetHovieProperty, QTGet Movie 
Property, and QTGetMoviePropertyInfo 
for working with movie properties. And 
QuickTime 7 lias accelerated this trend. A quick 
search through the latest Quick'iime header files 
reveals about a dozen additional triples of 
property'related functions, from ICMImage 
DescriptionGetProperty (and its sibiings) to 
MovieAudioExtractionGetProperty (and 
its sibiings). 

WeVe already seen some of the advantages 
of this new scheme for cpierying and setting 
properties. In the case of movie metadata, we 
could iterate through all metadata items asstx:iated 
with a movie, for instance, and retrieve and 


display the values of those items widiout knowing in advance 
either the size or the type of those values. TliaPs because we 
could use the QTMetaDataGetItemPropertyInfo function 
to query the metadata item for diat information, Abo, 
QuickTime can add new properties to tlie target objeas 
(movies, tracks, metadata items, image descriptions, and so on) 
without having to add new fonctions to get or set those new 
properties. And, of course, the advantages of conforming ati 
these various property accessor functions to a single calling 
pattern should obvious. Once weVe learned the parameter 
list for one of the GetProperty functions, we’ve effectively 
learned it for the other dozen similar funciions. 

But, for several of these taiget objecLs, there is an additional 
payoff. Not only does QuickTime provide a unified mechanism for 
getting and setting the object’s properties, it also pnwides a 
mechanism for our applications to l>e notified when one of tliesc 
properties changes. Tliai is to .say, we cart insuiU a mome {rntperly 
listeficK an application-defined calllxick procedure that is executed 
when the value of a specified pioi^rt)' changes. In my mind, tliLs 
i.s very important, as it relieves us of die necessity to continually 
jx)ll the movie for the value of a prt>pert>^ we are interesied in. 

In tins article, we'll investigate die movie property functions 
QTS^tMovieProperty, QTGetMovieProperty, and 
QTGetMoviePropertyInfo, as well as the function to install 
a movie property listener, QTAddMoviePropertyListener. 
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QuickTime Properties 


Let’s begin by kx)king at the declanilioas of the three 
principal movie property functions, from the header file 
Movies *h, QTGetMoviePropertyInfo is declared like this: 


OSErr QIGetMovicPropertylnfo 
Hovie 

QTPropartyClass 

QTPropertylD 

OTP rope r tyVa1ueType * 

ByteCoiint ‘ 

UInt32 ‘ 


( 

inPropClass, 
inPcopID. 
outPropType, 
outPrropValueSize, 
outPropertyFlagfi)r 


And the functions QTGetMovleProperty 
QTSetMovieProperty are declared like thk 


OSIrr QTGetMovieProperty 
Kovle 

CiTPropertyClass 

QTPropertylO 

ByteCoxmt 

QTPropertyValuePtt 
ByteCotmt * 

OSErr QTSetMovieProperty ( 
Movie 

dTPropettyClass 

QTPropertylD 

ByteCount 

CoustQTProper tyValue Pt r 


inKovien 
inPropClass- 
InPropID, 
inPropValueSize, 
outPropValueAddress * 
outPropValueSlzeUsed); 

inMovie, 
inPropCiass. 
iuPropID* 
inPropValueSize, 
InPropValueAddresg): 


and 


As you can see (and as you may recall from the previous article 
on movie meiadaca), we specify a particular movie property by 
providing a property class and a pfx^perty ID. These values, as 
well as the property value type remrned by 
QTGGtMovioPropertyInfo, are all declared as OSTypes: 


NewMovieFromPropertles, which we'U investigate in the next 
QuickTime Toolkit article. (If perchance we did uy to read or write 
one of thase other properties using QTGetMovleProperty or 
QTSetMovieProperty, we would r^eive the error code 
kQTPropertyNotSupportedErr.) 

For the class kQTPropertyClass_Visttal, these 
properr)^ IDs are defined: 

0num I 

kQTVisualPropertyII]_Hu€ 
kQTVisualFropertylD^Saturation 
kQTVi Bua 1P r op e rt y I D_B r 1 ght lies s 
kQTVis ua1F r Op e rtyI D_Con t ra s t 
I: 


* *vhue\ 
= "vsat*, 
= 'vbrt\ 
= 'vcon* 


All these properties can be gotten or set, and all return or take 
parameters of type Float32. 

For the class kQTPropertyGlass_Audio, Movies.h 
contains enumerated constants for just over a dozen properties. 
However, most of those properties cannot Ix^ accessed using 
QTGetKovieProperty or QTSetMovieProperty, The 
following prD|>erties are accessible using those functions: 

enun f 

kQTAudioPrcipertylD^Gain 'gain*. 

kQTAudlqPtopertyTD_Hutfi • *mute*, 

kQIAudioPi:op&rtyID_Balance = ‘bala* 

h 

The gain and balance properties operate on values of type 
Floats2, and the mule property operates on values of type 
Boolean. 


typedef OSTyp^ QTPropertyClass; 

lypedef OSType QTPropertylDj 

typedef OSType QTPropertyValueType: 

In addition, the parameters in which data values are passed or 
returned are declared in the obvious manner: 

typedef void * QTPropertyValuePti:* 

typedef const void * ConstQTPropertyValuePtr: 

So all we really need to know, to be able to use these 
functions, are the available property classes and their associated 
property IDs. The file Movies .h contains definitions of quite a 
number of constants beginning with “kQTPropertyClass_”j 
currently, however, mast of these classes of movie properties 
cannot be used with the movie property functions. In this article, 
well l<K)k at only two of those classes, for acces.sing audio and 
video properties: 

Btim t 

kQTPropertyClass Judio • *audi‘, 

kQTFropertyClass_Visual “ ‘viau* 

I; 

Most of the other currently defined property classes (for instance, 
kQTPropertyClass_DataLocation) and their associated 
properties are intended for use with the new function 


Getting and Setting Property Values 

It's quite straightforward to get and set these properties 
on a QuickTime movie. Consider for example die 
kQTVisualPropertyID_Brightness property, which 
governs the brightness adjustment of a movie. This property 
can takes values ranging from -l.O (which means the image 
has no brightness and is hence totally black) to TO (which 
means the image has maximum brightness and is hence toially 
white); normal brightness is 0.0, We can programmatically 
fade a movie to black using the function defined in Listing L 

listing 1: Setting a movie's brightness 

void FadeHovleToBlsck {MovieCont;roller mt) 

! 

FlDat32 origValva. value; 

Movie movie ^ MCGetMovie tme); 

// gel die ciuTcnt value of the brightness adjustment 

QTGetMovieProperty(movie, kQTFropertyClaas^Visual, 

kQTVisualP ropertyID_Btlghtness. eizeof(origValue), 

& origValue, HULL); 

// graduall}^ decrease the brigluncss to total darkness 

for (value = origValue; value >" -1.0; value "0.01) ( 
QTSetMovieProperty(movie * kQTP ropertyClflss_Visual, 


MACnCH 


QuicicTia«e Toouot 23 








kQTViiufllPropertyID_BrightneEs* sizeof(value), 
lvalue)I 
usieep(lOODO): 
ttCDtaw(inc, nil); 

1 

I 


Figure 1 .shows a QuickTime movie in a movie window^ 
and Figure 2 shows ihe half-way point of the fading that movie 
to black. 



Figure 1: A movie with the default brightness 


©60 a ABC.mov 



Figure 2: A movie with halved brightness 

This Ls very cool. Even axiier perhaps is to gnidually increase 
the movie's brightness to total white, which we can do by 
stepping up from the current brightness to 1.0. (Try it- you'll like 
jl) Keep in mind that the brightness adjustment is only a 
temporary' adjustment and is not saved into tlie movie file, even 
if you update the movie file on disk. Ditto for all the other audio 
and visual properties listed above. 

You should also know that the new properties-based 
APIs are not meant to exclude more classic style APIs. That 
is, instead of QTGetMovieProperty and 
QTSetKovieProperty with the specified property class 


and ID, we could use GetMovieVisualBrightness and 
SotMovieVlsualBrightness. So we could replace the 
call to QTSetMovieProperty in Listing 1 by this line: 

SetHovieVisualBrightneEs(movle, value* 0); 


Ihe third parameter here is a set of flags, which is currently unused. 


Deallocating Property Values 

Consider now tliis question: once we're finished working 
with a piece of property data, what do we do with it? Surely, the 
answer depends on Uie type of value returned by 
QTGetMovieProperty, which we can determine by 
inspecting the outPropType parameter in 
QTGetMovieProperty Info. Simple values like Booleans or 
integers or OSTypes are just copied into the local storage 
pointed to by the inPropValueAddress parameter and will 
be cleaned up when the stack frame is destroyed. But what 
about tilings like strings or handles or struaures? 

The answer lies in the QTGetNoviePropertyInfo 
function. Its last parameter is a pointer to a set of pwpertyJkigs 
that contain useful infonnaiion about the property values 
returned by a call to QTGetMovieProperty. Currently these 
flags are defined (in the header file ImageCompression*h): 


enuo 1 


kComp D ne nt P r 0 pe r tyF1a gCan S at La te r 
kCoap 13 cient P rope r t y Fl a gCan S e tNow 
kComp 0 n e nt P ro pe rtyF1agCa nGe t L a t e r 
kCojaponen t P ropertyFlagCajiGeiNow 
kCoBiponentPropertyFlagHaaExtetsdedlnfo 
kCutapotient F ro pe 11 y F1 a gVa 1 ue Hu s t B ® Re 1 ca s ed 


- (IL « 0)* 

- CIL « D* 
= (IL « 2), 
“ (IL « 3), 

- (IL « 4). 


= tlL << 5)* 

kCompcmentPropertyFlagValuelaCFTypeReE “ (IL << $), 
kCofflponentPropertyFlagGetBufferMustBelnitlalized 

* (IL << 7), 


kCcunponentPropertyFlagWlllNotlfyLlstenets 

I: 


- (IL « B) 


As you miglit guess, the inieresiing flags right now am the 
ValueMustBeReleased and ValuelsCFTypeRef flags. If die 
ValueMu stBeReleased flag is set in the returned set of property 
flags* then we need to release the pniperty value once we are done 
with it And if the ValuelsCFTypeRef flag is set, then the 
returned property value Ls a reference-counted Q>re Foundation 
type and we should release dial value by calling CFRelease. 

lliere is one complication here, which is that the values 
returned Ln the outPropType parameter to QTGet 
MoviePropertyInfo are to my knowledge not currently 
documented. So in cases where die ValueMustBeReleased 
flag is set but the Value IsCFTypeRef flag is clear, wc 
wouldn't know what routine to call to release the property 
value. Happily, the values for die property classes and IDs 
described above are either Float32 or Boolean, which 
require no deallocation. So for the moment we really don't 
need to worry about checking those flags. 

In the future, however, as die list of gettable and settatile 
movie properties expands, it would be nice to have available a 
more satisfying way to know how to release die property 
values. I assume that at that point the relevant data type 
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constants will (>e exposed. In the meantime, here are a few 
constants we c'an use ft>r the print ij^al allocated lypes^ 


t^riuni t 


kHyTypeCFTypeRef 

“ ’efry' 

kWy Ty p eQDP i c t it t © 

” 'pict' 

kMyTypeTex t Hand 1e 

- ’text* 

kMyTypeHandle 

» 'hudr 

kMyTypeQTAtomCon Laine r 

“ 'qtaf 

kMyTypeUserData 

“ ■udat■ 


h 


Listing 2 shows a limctiun ReleasePropertyValus that we 
can use to determine whether :i property value needs to be 
released and, il so, to deallcx^ate values of these types. As you 
can see, w?e pass in the values we receive front 
QTGetMoviePropertyInfo. 

Listing 2: Handling value deallocation 

void ReleasePropetLyVislijp (QTPropertyClass propCiusa, 

QTPropertylD propTD, QTPropertyValueType propType, 
QTPropertyVxlueFt r propVii 1 ueAddress, 

&y±eCoiint propValiieSize♦ UTnt32 flagel 
I 


// weVtr gut a CnypcRcf; rclease it 

CFRe tciflRet (CFTypeRef) propValueAdd reiss): 

goto bail; 

1 else [ 

// not a (VTypeRef; bKtk fur handtes and atom coniaineni 

switch (propType) I 
case kMyTypeHandler 
case kMyTextHatidle; 
case kMyTypeQDPlcture: 

If CpropVaiuoAddiress} 

Disposeltandlot (llandle) propValueAdd t^ss): 
break; 

case kKyTypeQTAtomCoritaiti^r: 
if [propValueAddress) 

QTDI sposeAtotoContainer 

f CQTAtomCootalnerlpropValueAddr&ss); 

break; 

default; 

break; 

1 

I 

bail; 

return: 

I 


// make sure ibtra' is smrage that must fx adtased 

if (propValueSize ^ 0) 
goto bail; 

If ((flags & kComponentPropcrtyFlagValueMustSakeleased} 
— 0 ) 
goto bail; 

if (flags kCompQneritPropertyFlagVaiuelsCFTypeHef) ! 


Property Listeners 

Tlierc is, as far as I ciiii see, no particular advantage to 
using llic new movie property funcLions instead of spetifre APIs 
like SeLMovieVisualBrightness, The real power of this 
new set of funclions arises from the aliility io Itc inlormed of 
changes in movie properties by installing movie iiroperty 
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robust engines. That’s why OpenBase SQL delivers real 
fault-tolerance—and the horse-power today’s multi-user 
applications need. 
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........ 
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listeners, Thai is, iliese new functions alltjw us lo momtor the 
value of a specific movie property witliout having to continually 
poll its value. For instance, we couiti install a listener for tlie 
properly class kQTP ropertyClass .Audio and the property^ 
ID kQTAudioPropertyID_Gain in order to l>e informed 
about changes to die movie's volume. 

We install a property listener for a specific property class 
and ID by calling the QTAddMoviePropertyListener 
function, declared like this: 

OSErr QTAddMoviePropertyLisTcner ( 

Movie inMovie, 

QTPropertyClflfls inPropClass, 

CyrPropertyTD inPropID, 

OTHovioPropertyListenerUPP inListenccProc. 

void * innGOrlteta); 

As you can see, we need to indiote the class and ID to 1 k‘ 
monitored, as well as a pointer to the funcaion to be called when 
that proj>erty changes. We can also pass in a pointer to some 
application-specific data (that is, a referetwe const^nl or rcTcon), 
So, for instance, to listen for volume changes, we could execute 
this code: 

QTAddMci V i eP r o pe r t y Li s t ene r {tao vl e, 

kQTPropectyClas£_Audlo, kQTAudiQpropartyirLGain. 
(Q'OloviePropertyLiBtfinerUPP) ^PrapChatigedCal Iback * 

HULL); 

nie callback function PropChangedCallback might be 
defined as in Listing 3. 

Listing 3: Handling property changes 

void PropChangedCallback (Movie movie* 

QTPropertyClflSB propClass, QTPropertylD propID. 
void * refcon ) 

I 

switch (ptupCiass) I 

case kOTPropertyGlasE^Aydlo: 
switch tpropID) t 

case kQTAudicPrapPttylD_Gaiii: 

// do something jaieresting, like update a volume slider 

break; 

default; 

break; 

I 

break; 

default! 
break; 

I 

! 

You might recall that QuickTime already provides a .similar 
capability in the fonn of tlie movie conimUer action fiUer 
proceciure, which is informed of actions associated with a movie 
controller In a movie ctintrnller action filter procedure, we ran 
watch for actions of type mcActi on Set Volume and respond 
accordingly. But there are several importanl differences l>etween 
using a movie controller action filter procedure and u.sing a 
movie property callback function. First, the property callback is 
executed only when the associated property aaualJy changes 
value; by contrast, the action filter procedure receives a 


mcActionSfitVolume whenever an mcActlonSetVolume 
command ts issued to the movie controller, even if the specified 
volume is the same as the current volume. Also, 
mcActionSetVolume is sent to a filler prot^edure only by 
movie conuoller-related calls or user actions; in panictilar, it is 
not sent when Movie Toollx>x calls (such as SetMovieVolume) 
are made. By contrast, die movie property callback is executed 
for movie conirr^ller and Movie Toolliox volume changes. In 
both respects, the movie propeny listening Ix^liaviors seems 
preferable to the movie controller action filter procedure 
liehaviors. 

When we are finished listening to a specific movie firopeny, 
we should unhook the prtiperty listener by calling 
QTRemoveiMoviePropertyListener, like rhLs: 

QTR«»^b 0 V cHo vie Pr 0 pert y LI s t ene r (mo vi e. 

km? rope rty C 1 as s_Aud i a , kQT And I oP r a pe rtyI D.G ain, 

C Q'rMo vi eP r 0 pe r ty LI s t aner U P P) & F r Q pChan ge d Cal I back, 

NULL); 

'Ihis is Stop PropChangedCallback from being called when 
the volume of the specified movie changes* 

One final point: not all movie properties are currently 
listenabie. We can determine whether a specific property is 
listenable by calling QTGetMoviePropertyInfo and 
inspecting the set of property flags returned. If the 
kComponentPropertyFlagWillNotifyLiatnners flag b 
set, then that pmjK'ny is indeeti listenalde, 

Conclusion 

'Hie movie property limctions introduced in QuickTime 
version 6*4 provide a standard way for as to get and set some of 
the properties aHsoclated with QuickTime movies* And, perhaps 
more inuxirtant, ifiey provide an easy and reliable way for ils to 
monitor changes in those prtjperlies, by installing property 
listeners. In this article, weVe seen how to work with the 
lianclful of audio and visual properties that are currently 
supported by these functions. In tlie next article, we'll continue 
working with movie properties, by kK3king at a new Function for 
opening a QuickTime movie .specified by u collection of 
properties* NewMovi ePromP rope rt ies* 


\\\\ 
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By Paul T. Ammann 



Tlie X Window System (more coiniiKmly (“nlled XI1) on Mac 
OS X t)rovide?i significimT opportunities Ibr Mac OS X developers. 
Hkiseci on tlie open soune XFree86 project. XII for Mac OS X Ls 
(XHiip^irible, last, and fully iniegrated with Mac OS X. It iruludes liic 
full XnR6.6 taiinology Imluding an XI1 window' st^rvxT^ QuarU 
window' niajiager, lil>rarie,s, and Ixisic utilities sucli as xiemi. 
Wiietlier a Unix user or an XI1 develnpcT (or IxHh), Mac OS X olTcis 
a pkitfonn w^here your applications cun nui without rnixlification. 
On a Mac, any of the thousands of available X II appikations am 
run in a window mnntng c'oncunently alongskle iTunes, Micnisofi 
Fxcel, and any cxlier Qx^ua, Carixm. or Java applications, 

IIktc are some things to know alxxit XII on Mac OS X Mow 
you suijt, and this arlickf cxillines the key Lssuc^s you sluatkl Ix aw'aa" 
r>f. Many existing XI1 ap[)[ic“ali<m,s from the UNLX world are av^tilable 
to use lor bee—if you know' the ''secret handshake." 'Ihar is, ycHi ran 
often easily gel Ihc schirc ('(xle. hut its up to yoti to build and install 
the prcxiua. 'Hiere are sonic bimry distrilxiiions available ils well, 
w ith applrotions pre-built for XI1 on Mac OS X. 'IliLs n-prc'sents a 
new souwc of useful .software ihw you don't want io <jvtrrl(X>k. 

Let's first review stmie Xll lxi,sks (for those new to XIIh then 
discuss installing the XI1 environment on Mac OS X and suming it 
for the first lime. 11ii.s section includes a description of tlie 
advantages stemming fn>m integration with Inal) the Finder and 
Quails. It also discusses diffciences lxtwt:cn Ibrmin^il and xterm, 
and lull scrcien suppoii. Next, several Xll configiimtion Issues are 
covered, including XII fimvarding, configurijig xauth, iLsing ssh 
to nm remote sessions, and Pseudocolor siipjxm. Tlien tx>mc 
examples of building Xll afjplicati^ins from source using 
configure, Make and xiTikmf; and installing binaries using Fink. 
We ctmclude with msirutiiorrs on downloading and ninning 
OpenOftlce, and point you to further resourc'es for next steps. 

Xll Basics 

If you’re not already familiar wiih it, Xll can lx* a bit 
confusing. You need to un<.lerstand a few terms and concepts 


dial are essentia! to Xll before you read the resi of this article. 
If you are an XI1 user, you am skip to the next .section. 

Which Machine Is tlie Client? 

One impodant of the Xll architecture is that the 

typical client and .serv'cr Urnninology is reversed. Instead of a 
user's ItK'al client machine asking a rtiuoie .server machine to do 
stanelhing and send the output back \o ihe client, the user 
invokes a (|X)tcnlially remote) client wliich sends its output Irack 
to the u.ser's local XI1 display server To make this work, the user 
neetLs lo l^ able to conncx:t to die client, the server must allow 
dis[)lay connetiions from the client, and the $DISPLAY 
enviixjnment variable niusi lx* properly set on the client. 

How and Where $I>ISPLAY Variables Arc Set 

SDISPLAY lefers lo the X11 display server saeen. It specifies 
what dispkiy server will receive the output generated by the 
a[>plicatic)n run on the client. For a given session, or user, you can 
sjxtify on w'hkh ouipui device the output should aj>jK‘ar. 

If you use ssh to Itjgin io the client front an existing xtenn, 
tile $DISPLAY %'alue will lx* set aulomaliadly, anti routed hack 
to the maciiine frtmi w'hich the connection was inilialed. 

XI1 Installation and Execution 

Xil is available as an optional install on the Mac OS X 
viO.5 Panther, and Mac OS X vlO.4 Tiger install disks. Run the 
Installer, select the XI1 option, and follow the instntetions. You 
should install the Xll SDK as well, wliicli is included t>n the 
Panther Developer (^l). If ycni intend to download Xll source 
code and build your own binaries, you cvill need die tools and 
headers tnckuled in the SDK. 

If you have Mac OS X Server, you first need to download 
the XllUser.dmg {Re.souires). Look for the Download Xll 
button near the Ixxtom of the content area on this page. I'his 
dow'nload retpiires you tf) login using your Ap|)le ID; if you do 
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not alrejidy li;ivc one, ytui can register at tftis tiitie. After 
downloading, douhle-cliek the package icon kj install. You also 
need to install the XI1 SDK in order to liujkl XI1 applktitions, 

I'he fnsLaller puts XILapp into /Applications/ 
ULi.llties. Simply doublc-cUck to launch, CcmgratulaiionK! 
Y"c>u now have an XM environment running on your Mac'intoslc 

Note: Ifisuilling XU on pre-Panther systems rccjuires 
manually insialling XPree86 and XDarwin.app from the 
SoLircefoige "XonX” project (Resources). 

XI1 arid Finder Integration 

Apple’s XI1 iinplemeniation is based on the widely-used 
XFrec86 project, i'he executable that controls the environment, 
Xli.app, runs like any other application in the Under. You can 
think of Xlla[3]> as a gateway to the XI1 environineni: if you 
click the Xll.app D<K*k icon, you enter the XU world. 

Xll.app may l)e displayed as XU in the 
Applications/lJUlUies folder, depending on the Under preference 
‘'Show all file extensions.” 

A tremendous benefit of this integration is tliat the Finder 
respcmcls to a doiif]|e<lick on a UNIX or XM application icon 
by starling XI1 (if it's not aircaidy lunning) and bunching the 
application. I’lii.s feature can significantly reduce the time you 
spend typing eomnianddine bLineh commands. 

XI1 and Quartz Integration 

Tite Quart? Window Manager (quartz-wm) runs as the 
default window manager, aliljough you am nm alternate 
window managers if you prefer. A significant advantage of 
quartz-wni is thai il integrates Quarix with XU, and adds Aqua 
buttons (dose, minimize, muximize) to Xll windows. 'Ibis 
contributes to a unified api^earance of visible appiiaition 
windows when running XI1 in rootle,ss, or shared screen, mode. 
Ill addition, ilie Xll Dock icon dis()lays running ap()s in its 
menu, alkrwing you to easily bring Xll apps to die front. 

quartz-wm a 1st) provides the pa sic board integmiion iliai 
allows text copying between w'intlows. For example, you can 
copy text from a 'rerminal se.ssion to an xterm window ainning 
under XI1. Note ihai iKrause the key map()ings differ beiween 
the two environments, you neetl to use the UNIX equivalents 
for text manipulation on the XU side. Command-C copies 
selected text in l>oih Mac OS X and xlenii. But while 
Command-V pastes in Mac OS X. in XU the paste key 
sequence differs across applic 2 itions. For example, in xterm 
you use Option-Cliek to paste tile buffer contents inU) the 
cunenl xterm window'. This simulates clicking with the middle 
mouse button held dow-n; UNIX systems typically have multi* 
button jince. Other XU ai>]>licatians may belmve differently. 
See die XII FAQ (Technical Q^tA QA1232, see Resources) fur 
a more detailed discussion, 

Xterm vs. Terminal and open-xll 

xterm presents a much simpler shell windtiw than 
Terminal. But it provides :i significant advantage: when you stan 
an xtcnii session, it .sets uf) the Xll environmeiir for you. You 


can then easily run XU applications from (he command-line. By 
contrast, in Terminal you need to am the /usr/bin/opeii'xn 
.script to set up the Xll environment and launch XI! 
applications, as shown here: 

$ /uar/bin/operi-xll /sw/bin/x^aiaga 

On the other hand, xterm does not integrate with Mac 
OS X technologies the way Terminal does. For example, 
xterm does not suppeirt drag and drtip: you cannot drop a 
folder path into xterm to easily change to that directory with 
Elie cd command. 

Full-screen Support 

The default mode is for Xll windows to share the screen 
with native Mac OS X (Quartz-based) application.s. However, 
there is an option to run Xll in full-screen mode, where all 
the Xll applications ap[iear on a full-screen XTl root 
window^, and the Mac OS X de.skiop and toolbar are not 
visible. This can be useful if you are running a full Xll 
desktop environment (such as KDF or CiNO.ME), need access 
to the root window, or simply want to segregate your UNIX 
and Mac applications. 

fm}}ortant: You can always toggle back lo the Mac OS X 
desktop using Command-Oplinn-A. To re-enter XU, click the 
XM Dtx'k i<:on. If you forgei ilie key sequence, Comimnd- 
Oplion-Escape will bring up the Force Quit Applications dialog 
in the Finder. At this point you are back in Mac OS X, she XM 
environment is still running, and you can re-enter at will. You do 
not nee<l to force quit XIU 

Xll Configuration 

Xll is highly configuruhle, particulariy with regard to 
scLairity. In atkliiion, older XU applicatioits that rely on the 
Pseudocolor color mode may need sotiie help (o run correctly. 
Bach of these points is addressed in this ,set:iion. 

Xll Ffjrwarding 

XM forwarding allows the XM connection to be 
tunneled from the remote system (dieni) to the local system 
(display serv^er). For security reasons, Mac OS X does not 
enable XU forwarding by default. In order for clients to 
receive Xll forwarding, the system administrator must 
explicitly enable it on the Mac OS X system. Rnahling Xll 
Forwarding, Technical Qikk QA1383 (Resources) shows how 
to perform this task. 

Using ssh -X for Remote Session 

This section illuMrales ihe use of ssh X to connect from 
a server to a client, ssh -X is preferred over other methods 
becau.se it encry[)ls the communication between the server and 
client. Tile client is assumed to ainning Mac OS X. In order 
for ssh -X lo w'ork, you must enable lioth XU forwarding as 
dLscussed above, and Remote login on the diem (see Figure 
1), liefore attempting to login from the server. 
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Figure I: Enabling Remote Login in the Sharing Preferences 

Tlic fcjllowing sequence walks througli tlie establish me ni of 
a connection I>etween the server and client, and running an 
application. In this scenario, the display server is named Mertz, 
and the client is named Gumdmp. The XI1 user on Mertz wants 
to connect to Gtimdrop, run xcalc, and liave the calculator 
display on the primary Mertz screen. Tlie username is asd on 
Ixitli .systems. 

First, login to the client; 

Herts! asdS ssh -X -1 asd Gnaidrop 
a£d#guAidtop's password: 

Ust login: Wed Nov iO 13:20:57 2004 from feSO: :20d:93ff: 
Welcotte to Darwin t 
[GtundrgprH aed% 

Run xcaic; 

[Giifiidrop:/uEr/XllR 6 /hln| as<J% -/xcaic 4 
[J] 24Sa 

[Gumdrop:/usr/XllR6/bin] aadX 

'I’he caleulaior will launch at this point and display on 
iTiachine Mertz, After closing the calculator, logout of the clieni: 

[Gutiidropt/usc/xi IRfi/bln] asd% exit 
logout 

Connection to Gundrop closed* 

ssh -X with XI1 forwarding is the preferred approach for 
Rinning remote Xll applications. Tlie next two options, xhost 
and xauth, are not as seaire. However, we discuss them 
because they are still used. 

Using xhost to Control Server Access 

xhost controls access to a display server You run xhost 
on the server to specify which clients may send j)rt>gram oiitpiit 


TO the server. By itself this does nt)L sound so bad, but xhost is 
not very secure and can leave you exposed. Plus, xhost 
requires more setup tlian ssh -X* 'Fhe easiest way to use it ts 
the following; 

xhost +<client hosi:tnai!ie> 

The hosiname is then added lo an internal list of clients. 
That host can now access your display. Because this 
command is performed on a per-niacliine basis, every user 
on the client machine can access the di-splay server. On a 
network this is an invitation to trouble. Even more dangerous 
is not specifying a hostname, because then all hosts can 
access the display. 

You can spt;cify a username in place of a hostname. This 
allows other users on the IcKal machine to atxess the display 
server lacing executed by the current account. 

xhost (usernamg) 

The (minus sign) character undtxs a setting. For 
example, to dlsstble access from a particular host: 

xhost -<hQstriarae> 

Using the xcaic example discussed previously, firsT add 
ihe client to die access list on the server (MertzJ* 

HertzaBd$ xhost -i-GiMdrop 

Cumdrop be.ing added to ftcceaa coiiltol list 

Merta:" asd$ 

After connecting to the client, set the $DISPLAY value on 
the client to be the primary' sctx«n of Menz: 

[Gmidrop:^ asd% cd /ysr/Xl IRfe/bin 

[Gujidrop:/usr/XllR6/hlo] asd% setetiv DISPLAY Hertz:0*0 

Giiindrop:/usr/XllfL6/blnl asd% 

Run xcaic; 

[Gumdrop:/usr/Xl 1 R6/biii| asdl */xcslc & 

[IJ 2452 

lGuiiidrop;/usr/XllR 6 /binJ as<I% 

Alter closing the calculator and logging off the client, 
remove the client from tlie server's list: 

Hertza£d$ xhost Cumdrop 

Cumdrop being removed from aroeKs control list 

Herts:” asd$ 

Using xauth to Control Server Access 

xauth adds a greater degree of security than xhost by 
using a cookie generated on the local machine (display 
server) lt» control access by llic remote machine (client). You 
generate the cookie, then copy the cookie to the clieni. 
When you add the .server to the list of hosts known to the 
client, you pass the cookie as well. When the clieni connects 
back to the display .server, the cookie is used to authenticate 
(he client. 
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learning More aliout ssh -X, xauth and xliost 

A very good discussion of ihe bencfils and pitfalls of ssh 
-X, xauth, and xhost may l)e found at the OrohorOSX page 
(Resources). 

Then.- are addititmal options and variations on the xhost 
(lags discussed alx»ve. More information on xhost is availalde 
in the man pages (type "man xhost") or on die Internet. 1 lere are 
a couple of useful links covering xhost and xauth: 

• htTp://www.leidinger.net/X/xhost.htiTil 

• http;//www.acin .uiuc.edu/workshops/cooLunix/xauth .html 

PseudoC-olor Support 

XII applications that were written in the days when video 
memory wa.s rekitively scaae may occa.sionally run into trouble 
widi modern display hardware. XI1 supixjrts multiple color 
mtxJels, all t>f which use pixel values as indices to determine the 
RGB or grayscale value tliai will be .sent to the video hardware. 
These models are distinguished by their siieciBcation of color vs. 
grayscale, separate vs. combined RGB colormaps (color lookup 
tables), and dynamic vs. .static enuies in each adormap. 

Pseudocolor is one of the XI1 color models. In die 
Pseudocolor model, each frame buffer (video memory) pixel 
value is used as in index into a single colormap. The entry at that 
index contains individual red, green, and blue values, which are 
then .sent to the display liardware. Tiiis indexing !>(.:hcnic allows 
applications to access a suixset of die available colors for a display. 
For example, an 8-bii frame buffer that indexes into a 24-t>it 
colormap, conlaining 8 lilts each for red, green, and litiie values, 
supports 256 simultaneous colors, out of a touil of 16+ million. 

XI1 includes additional color nuxlels. For example, the 
DirectColor model uses separate red, green, and blue colormaps. 
In this ca.se the frame buffer value consists of separate RGB 
indices into each colormap. Bccau.se each txilomiap is typically 
8-biLs wide, the numlier of simultaneous colors or RGB 
combinations is higher with DirectColor than with PseudoColor. 

However, XU does not supjxirt PseudoColor automatically, 
which presents a problem for applications that ret|uire 
P.seudoColor, Here arc a couple of solutions: 

1. If you svant to run an ai>plication thrit retiuires PseudoColor. 
and you do not need to simultaneously run otlier 
applicalions diat require DirectColor, then you can launch 
XU in 256 color mtxle. To do this, open the XU preferences, 
select the Output pane, and change die Colors value to 256. 
Restart XU, and then launch your application. 

2. If you want to run IxhJi PseudoColor and DirectColor appikatioas 

at die same lime, you can nm a second X server in 256 color 
nxxle to liandie die PseudoColor apps. Tliis setxmd server must 
lx; .started from die command-line with die -deptii 8 aigument. 
and the -displaylD n aigument to specify a display odier llian tile 
default (wliich is used by XlTapp). This allows applications that 
nc-cd PseudoColor support to use the second .server and 
DirectColor apps to u,se the first server. For example; 
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Hertz:*' asd$ Xqiiaris -depth 3 -displaylD 1 


3. Tlien: i.s no support for using Imh Pscud<)Ct>!or and 
DirectColur at the same time in a single applioiion. 

Building and Installing XI1 Software 

This section contains examples of downloading and 
building Xtl applications. You have several pos.sibilities^ 
depending on how the code is packaged. The standard UNIX 
approach for building from source is to first generate a 
makefile, then compile with gcc. If the makefile does not 
exist, you can either use a configure script (if provided) or 
Imake. 11 a binary has already Ixfen packaged, you can use a 
I)ackage manager such as Fink to dt>wnload and install the 
working application* E;tch of these options is discussed here. 

Generating a makefile witli conf igure 

First, download and unpack the tarhall (the .tar file, or 
*iar.gz if gzipped), 'I1iis example assumes you have unpacked 
ihe source code for the xpdf application* Since a configure 
script is included, you first nm configure from witliin the projeti 
directory to generate the makefile, then make to compile, then 
make install to complete tlie biiitcl: 

Hertzasd$ cd /DowrUoads/xpdf-l^OD 
Hertz:/Dovimloods/xpdf-3,00 asd$ ./configure 
checking for gcc... gee 

checking for C compiler deftiult output.** a.otit 
cliockljig whether the C campiler works... yea 
ehneking whether we are cross earapllltig*.. no 
checking for suffix of executables... 
checking for suffix of object files... □ 
checking whether we are using the GNU C compiler*., yes 

Hertz:/Downloads/xpdf 3*00 asdS make 
cd goo: Qiake 

g’H- g -02 *DHAVE_00NF1G^H I.. 1. c Gllash.CC 

g++ ^g -02 -DHAVE_C0NF1GJ -I** I. c GList.ce 

g++ -02 ’nHAVli_C0NFlG_H 1 .. 1. -c GString.ee 

g++ g 02 I)liAVE_C0NFIG_H K. 1 . -c gmeiiipp.ee 

g++ g 02 -DHAVE_C0KFTG_fi K* -1* -c gflle.ee 


Men z:/Downloads/xp(if 3.00 asd$ make iuRtall 
mkdir -p /usr/local/bln 

/usrAbin/inatflll c xpdf/pdftops /usr/lcjcal/bin/pdftops 
/usr/bin/insrall c xpdf/pdftotext /usr/local/bin/ptlftotext 
/usr/bln/inscail -c xpdfVpdflnfo /usr/loeal/bin/pdfinfo 
/usr/hin/install -c xpdf/pdrfunts /uBr/local/bln/pdffonts 

Hertz:/Down1oad s/xpd f'3 * 00 aad $ 

The output from make install shows tbal this package Insiulls 
into /usr/local/bln/* 

Generating a makefile with (make and jsmkinf 

If a configure script Is not provided, you can generate a 
makefile by running the tiaake command* Bui. since Imake 
requires a number of arguments, so you should instead use the 
simpler xmkmf command, which packages most of the coimnand line 
arguments for you, and then invokes Tmuke. The following 
listing uses the xpaentan to Illustrate the preceding 
steps. The Is command provides before and after directory 
snapshots to show that xjnkref did indeed generate u makefile* 

Hertz:/downioads/xpacman Folder/xpacman.l asd? Is 
Tmakeflle Makefile .nointake 

xpaeman.README xpacman.c 

Hertz:/downloads/xpacman Folder/xpacamn. 1 asd$ xmkinr a 


iinake mselnstalled -I/nsr/XllRfi/lib/Xll/config 
make Makefiles 

make: Nothing to be done for 'Makefiles’, 
make includes 

make: Nothing to be done for 'includes', 
make depend 

geemakedep - 'I/usr/Xl 1R6/include -D_DARWiK_ - 
DNO_AU,OCA -DK.LOCALE DCG8G_BASEI> 

— xpacmau.c 

cc: cannot read specs file for arch H386' 

Hertzj/downloads/xpacman Folder/xpacman.1 asd$ Is 
Imakefile jMkefile 

xpacman*REAlJKE 

Makefile*noimake makefile*bak xpacman.c 

Hertz:/downloads/xpacman Folder/xpacmanJ asd$ more makefile 

In spite of the cc warning message, a irtakeflie was generated. 
Now you can run make to compile the program. 

Hertz:/downloads/xpacman Folder/xpacman.1 asd$ make 
/usr/bin/cc ’g -Os -Wall Wpointer-arith *no-cpp precomp 
I/usr/XUR6/include 

D__DARWIN__ ’DH0_ALL0CA ’DX_L0CALE DGSRG_BASED 
c 0 xpacman.Q xpacman*c 
xpacman.c: Tn function main": 

xpacman.c:250: warning: suggest explicit braces to avoid 
ambiguous 'else' 

xpacman.c:306: warning: embedded '\0' in formaL 
xpacman.c:449: warning: implicit declaration of function 
'tolower' 

xpacmEn.c: In function 'setup^maze*: 

xpacTnan.c:819: warning: unused variable "ex' 

xpacman.c:SI9: warning: unused variable ’ey* 

xpacman.c:819: warning: unused variable 'w' 

xpaCTiian.c:8l9: warning: unused variable 'h’ 

xpacman.c:819: warning: unused variable 'p' 

xp.'^cmati.c: In function 'plot_paE:man': 

xpacman.c:1074: warning: unused variable 'x* 

xpacman.c:1074: warning: unused variable 'y* 

xpacman.c:1114: warning: enumeration value DEAD' not handled 

in switch 

xpacman.c; 1072: warning: 'plotitnage' might be used 

uninitialized in this function 

xpacman.c: In function 'update_gaiBe_eat': 

xpacman.c:1190: warning: implicit decloration of function 

* whlc h_gh ost_c oil ide ' 

Xpacaan.c: Tn funcrion 'newpacpoa': 

xp8cman.c:l207: warning: enumeration value 'DKAJT not handled 
in switch 

xpacman.c: In function ’npwghostpos_eaT’; 

xp3croan,c:142e: warning: enumeration value 'DEAD' not handled 

in switch 

xpacinan.c: Tn function 'newgbostpos'.* 

xpacman.c;145l: warning: enumeration value 'DEAD' not handled 
in switch 
rm 'f xpacRuin 

/usr/bln/cc -o xpacm^ -g -Oa Wall Wpolnter arllh no-epp- 
precomp 

L/usr/XllR6/llb xpacman.o -IXexr 1X11 
make: *** No rule to tiinke target xpacman .man'. needed by 
'xpacman._man'. Stop. 

Hertz:/downloads/xpacman Folder/xpacman.1 asd^ make install 
install -c o coot g wheel xpacman /usr/XlIRe/bln/xpacnian 

Hertz:/downloads/xpacman Foldor/xpacman.1 asdS 

Installing Binaries with Fink and 
FinkCommandcr 

The Fink p;ickage manager handles download, insuillajion. 
and removal of binaries, as long as a package has Iieen provided 
on one of the Fink servers. In fact, you sfumld try Fink before 
attempting to build from .sourt'c (let someone else do the hard 
worki). You first nwxl to install Fink trom SoiirceFoigc. Fink 
differs Irom typical UNIX installers by installing itself and 
managed packages into / sw/bin. This prevenl.s collisions with 
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other UNIX software, which lypiciilly reside in 
/usr/local/bin. 

Fink responds to the list command by connecting to its 
repositories and displaying a list of available packages: 


Hertz I*- asd$ /sv/bin/Cink list 


ktl 

xftl-dQV 
xftZ shlibs 
xgalaga 

classic game of gfllaga 
xiangqi 

ximian-connector 
plugin for evolution 
xlnvadcrs 

Invadire clone for X 


[virtual pacltagej 
[virtual package I 
[virtual package] 

2p 0,34'1 Clone of the 

[virtual package] 

1.4,7-2 MS Exchange 

2.1.2-2 Space 


Hertz 


isdS 


Fink can lx; used to install or remove packages. When 
iRslalling, Fink checks for supporting packages that may lie needed 
for tile installation. If any are missing, Fink asks if you want to install 
them, and tlien handles tlie download and installation automatically. 
This example iastalLs the xgalaga package: 

Mertz:^ asdS /sv/bln/fink install xgalaga 
/usr/bin/audo /sw/bin/fink install xgalaga 
Password: 

Inforrpstiou about 1742 packages read in 1 seconde. 

The following package will be installed or updatedi 
xgalaga 

Hertz:” asdS 


Running the list command again shows that KGalaga is 
installed (denoted by the 1' in column 2): 

1 xgalaga 2.0,341 Clone of the 

classic game of galaga 


An alternative to the command-line is FmkCommander, which 
pnivides a graphical user inrerface on top of Fink, See Figure 2. Tn 
addition to displaying package summary information, 
FinkCoimnander provides menu items that correspond to the Fmk 
commands. You .select the package to install or remove, then the 
Binary > lasfall or Binary > Remove command, respectively, Ncjte 
that you itillsi instill Fink tefore installing FmkCommander, 



Figure 2: Using FinkCommander to Install a Package. The Fink 
Output Appears in the Text Area Beneath the Package List 


Now you can nm the installed applic’ation. Figure 3 shows 
the command line used to launch XGalaga, and the application 
splash .scTeen. 



Figure 3: Running XGalaga in Shared Screen Mode 

Installing and Running OpenOffice 

OpenOffice is an open source office suite that aims to 
prtivide many of the features found in commercial Office 
software. This includes w'ord processing, spreadsheet, 
presentation, and drawing capability. The link to the Mac OS X 
download of OpenOffice i,s provided at tlie end tif this article. 
Tlie 0(x.‘nOffice download does not require Fink, However, the 
OpenOffice instil Her leqtiires Mac OS X v lO.3 Fanther or later. 

After downloading, run the installer. Tliis will place an 
OpenOffice folder inside /Applications. Inside tills folder, 
double-click Start OpenOffice, org (see Figure 4) to launch 
OpenOffice and the XI1 cnvironnieni Cif not already running). 
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Figure 4: The Start OpenOffke Application 


TIktc is no additioniil setup recjuircd to run OpenOffice. 
"ITie OpenOffice.orj; creators have made it very easy to get 
started. liememlTer that this is art XI1 application, not an Acjiia 
application, so it will kK>k atid fjehave dilTerently tlian a iiaiive 
Mac OS X app. For example, text rendering in the OpenOffice 
word processor (see Figure S) kjoks less shaq:» than in TextBdit, 
and the OpenOffice file forinats ane not necessarily conipaiihlc 
with their commercial counterpaits. But OpenOffice offers a lot 
of functionality dial miikes up for these sliortcoiTiings. 
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Figure 5: The OpenOffice Word Processor 


Like other open source projects, ()penOffice will [inprove 
more quickly based on contributions made l>y the develo[X.T 
community. Clieck out the OpenOffice.org welisite if you would 
like to help out* 


More Information 

XI1 can provide an additional source of softw'are. Tlie 
references Ik'Iow contain additional information on XII and 
related topics. 

• Several resources are linked off the Darwin XI1 page 
(Darwin is Apples open source prefects). 

htto://develoDer.aDple.com/darwin/projects/X11/index.html 

• Tedmioii Qt^A QA1232 XI1 FAQ. 

httD://deveiQDeLaDole.conn/Qaya32QQ1 /ual 232.html 

• Technical Q^A QA13B3 Enabling Xtl Forwarding. 
Additional infimiiaijon is available at Hacking Linux Exposed. 

httD://develQpeLapplg.com/qa/qa2Q04/qa1383.html 

http://www.hackmglinuxexposed.CQm/artides/2004Q7Q5.html 

• A great discussion of ssh -X versus xautli versus xht^st is 
available on the Ordx>rus for Mac OS X site* 

http://oroborosx.sourceforge.net/remotex.html 

• Download Xil for Mac OS X ( Note that users of Mac OS 
X Fantlier v.l0*3 already have this downlaid available on tile 
CD, as well as the XII SDK). 

http://www.apple.cQm/macQ5x/feature5/x1 1/download/ 

• Download OpenOffice for Mac OS X (X11 version), 

http://Dorting.QDenoffice.orQ/mac/OQO-osx downloads.html 

• Downloacl Fink and FinkCommander from SourceForge. 

http://fink.SQurceforge.net/download 

http://finkcQmmander.sourceforoe.net/ 

• An overview of the XII enviromnenl, including window 
managers and Fink, is provided in Mac OS X for Unix Geek,s 
from O'Reilly ik As,s(xiates. 

http://wwW:dFei |l y,cQm/caTg[Q g /mpantheruni)tf 

• For a (x>pular and aseful discussion, see Fink and Afiple’s XI1. 

http://homepajjejnac,oom/s.aol^ 
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nwd-lUTlOll COVES STii¥ 



Ptiiding, Viewing and Creoting Vodcosfs an 
fha Mac - Your 1 5 minutes of famo are 

coming right up! 


By CiiiNiaiiu«l St«iii 


C Editor's Note: Applets recenr afinounccmeni of native video suppon for iPod tnakes ihe future of Vodc-:iSting even inure 

certain.,, and more significant. Read onf! 



Podcasting: The Next Generation of 
Radio? or Something more... 


lJuring his keynote address at WWDC; 2005, Sieve Jobs 
introduced podcasting as a time-shifiing PIVOesque technology 
aimed at revolutionizing radio. Interestingly, no announcement 
was made uf video suppcjrt within the pcxlcasting specific'jition, 
nf>T to mention iTiines playliack of syndic’aied video feeds (e,g. 
V(Kk'a.sts). Nevertlielefis, one is hard pressed to find mure than a 
token sampling of exUini vodcast content available for 
subscription via Apple's iTunes Milsic Store (ITMS), Tfiis strategy 
is consistent with Jobs' recent statement that "we also oiler video 
podcasts, but will people buy a video device fiist to watch this 
video? So far they hiwen’t. Nobfxly has been succes.sful with that 
yet.'' It seems, at lea-st for the time being, that Apple is content 
with offering basic support for vodcast content and letting the 
third f>ariy developers lx.'liind DIY and FireAnt innovate the 


medium in amcerl with the growing tx^mmunity of video 
tiloggeni. This situation is not likely to change until Apple 
develops a ptirtable video soiulion, capable of higher cjuality 
video playlTack, On llie ('ontent aggregation front, liolh DTV and 
FireAnt have been working with content pmviders and popular 
directory services like IX^Licio.us, Yah(x>, MeFeedia and many 
others to provide end users witli a licli array of vcxlcast content. 

Whether you call ii viogging, video hiogging, Internet TV, 
or simply vodcasting (Video On Demand-casting), the iclea 
behind podcasting, whether using video or audio, is certainly 
nothing revolcilionary. Rather, podcasting is an evolutionary 
extension to the RSS 2.0 (Real Simple Syndication) standard, 
with support for media enclosures (e.g. audio, video, or pdf 
Files). Nonetlielcss, Apple's announcement of podcasting and 
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tlie related, though not well advertised, siippon for video 
enclosures certainly represents a shot in the ami for the 
liuigeoning syndic:aied video crowd. 

] would not be surprised if Apple were currently in talks 
with major media outlets to offer something like the ITMS, 
only with a focus on video content. However, at this point, 
Apple's strengths are their QuickTime 7 technology, witli 
support for H.264 video compression, and their suite of video 
editing and content production applications like iMovie and 
Final Cut Pm. 'fhese uhiIs wall prove essential to Mac tisers in 
the pre-publisliitig phase of vodcast creation and will be used 
in the accompanying tutorial that covers turning your videos 
into vodcasts! 

For the purposes of the article, the term vodcast w-ill l>c 
trealed as synonymous with more histoncal terms for the 
publishing of internet-based video (vlogging, video blogging, 
vklcasting ere.), the bulk of which is vodcast compliant 
anyway. In tests, I have ftmnd that even RSS feeds made 
without reference to the podcasting specification work 
flawlessly with iTunes and integrate into the iTunes database 
as podcasts. The essential dependence, so far ns rTones is 
cfincerned, is RSS 2.0 compUance and iTunes support for 
your concent type. 

Although w'c will nut weigh in on die debate surrounding 
nfimenclature for this new medium, I would lend to agree 
wiili Michael Verdi, of http://www.michaelv6rdi.com/ . whose 
rant on the subject ( http://i330Q(]26.U5.archive.org/Q/ttems/ 
MichaelVerdiVlQQAnarchv/vloqanafchy.fnQv ) is among the most 
lucid commentaries on this debate I have come acro.ss. His 
main thesis is that U> define such a new and dynamic medium 
at this early stage would only serve to limit further 
expenmentntion and evolution within the medium. For my 
part, 1 couldn’t agree more. 

Anatomy of a Vodcast 

Vodcasitng is simply an instance of podcasting in wfiich 
the target media is video. Therefore, the podcasting 
specification, as published by Apple at 
http://phobQS.aDple.com/statlc/iTunesRSS.html . is equally valid 
for several media formats C,e.g. mp4a, mp3, niov, and pdf). If 
iTunes support is not required, you may use additional 
content formats like Flash, WMV, DivX, XviD, and others 
depending i>n which players you are targeting. Both DTV 
and FireAnt offer support for media formats beyond what is 
currently available in iTunes and employ plug-in 
architectures io facilitate the development of wider support 
for emerging and existing video formats. 

Whichever approach you take to vodcasting, the steps 
remain the same: 

1. Coinpres.s your vidc(> in one of many available formats 
depending on your playback srjUuion of choice (e.g. iTunes, 
D'l^, FireAnt, etc.) 


2. Rdti a simple XML file (iTunes compliant vodcast example 
provided in Listings I and 2) that details your vodcast 
metackita and may reference one or more media enclosures 

3. tJpload your XMl. and media files to a server, iDisk, or other 
hosting solution 

4. Fire up iTunes, D1V or FireAnt and subscribe to your vodcast 
via reference to your XML file 



Figure 1. A simple vodcast workflow diagram 


Lights, Camera, Compression! 

Once you have created a video, open it in QuickTime Fro 
and go U) File > Export and select a video format 
compatible with iTunes and other players, such as mp4. 
Optimize the export by clicking on the Options button In 
the export window and tweaking the compression 
parameters in the MPA Export Setting dialog (Figure 2). 
Feel free to experiment with the various settings or just go 
with the defaults. With playback support from alternative 
players tike FireAnt, you can syndicate flash contem like 
http://hapDytreefriends.atQmfilms.CQm/index.html to great 
effect. However, if you want to retain iTunes 5-01 
compatibility, you need to stick with either mov, or better 
still, mp4-based content. Depending on several factors (e.g. 
epu speed, video format, data rate, image size, et alia) the 
export may take a few minutes or quite a bit longer. 
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Figure 2. Sample settings for video compression using 
QuickTime 7 Pro with H.264 


For this example, wc will rest the feed your load well 
server, llierttfore, you need to piaee the vitleo and XML files inu> 
your Sites suhfokierand enable Personal Web Sharing in 
the Sharing preferenees pane (Figure 3X 
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Figure 3. Turn on Personal Web Sharing to host your feed 
on your local machine 


solutions. Altlu>ugh tools exist for citraling vodaist t^s, I find it 
easier to jiLst edit tlic file diaxtly in a text ediu)r (e,g. TextFdit or vi). 
Listing I und 2 provide you with a template upon witicii you ntay 
Ixtse your own vtxieast XML file. Notice liiat the vodcast.xinl file may 
ix? eoncepaially l>roken down into two main sa:lit>as,. the first of 
which ks popiiLited witii metadata thiE is consistent across vodcasr 
episodes. In other words, iliis initial section remains die saiiK* for 
each instance of your vcxlatst, sme^, in principle, vodcasts refer to 
several media files. The sccxind p;trr of the file is sfxxific to each 
edition of your vtxlcast as a^prcsenied liy a media cndosiitt^ 
Therefore, die dtiia used for Listing 2 will change for each udclciJ 
video enciosiine you iniegraie within your feed. 

In a perusal of the sample file, you will see iltat the tags are 
filled in witli dest ripiive placeholder metadata that serves as an 
example of what each tag is meant to commtinieate. For a 
detailed discussion of tag definitions, please refer to 
http://phobos.apple.com/static/iTunesRS5.htmL It is especially 
important to avoid illegal characters within your lags (e.g. ik, >, 
<, \ ", ©, and as they will render an otherwise well- 
structured feed unusable. 

Listing 1: vcKlcast.xnil (Section 1) 

C7XH1.I version"'*! ,0* encod1ng“''’UTF-5'‘7> 

<rss XMLns: ituneB"**http: //wvw. itunes.com /DTDs1,0.dtd” 
version='^2.0"> 

<cKannel> 

<titie>Hy VQI>CASTS</title) 

Citunea:autho r >Y0UH NAME</irunes ^ author) 

<link)http: / /www. sitenajne * cojn</1 ink) 

<de£crlpcion>Put any description about the Vcdcact channel you 
desire hei:e</description) 

<ltTJiieer subtitle) Put any subtitle about the Vodcaat channel 
you desire here</ltunesisubtitle) 

<itynes:Eaiiiinary)Pui any sussoary about the Vodcast ebamiel you 
desire hare</itunes:suannary) 

<lflnguagc>EN</language) 

<copyright)(c) 2005 your name(/copyright) 

<1tunes:owner) 

<i tunes r naiae>you rname</l tunes: name) 

(itunes: emai 1 /yonraddress^fy ourcompany. coniC/i tunes: erjai 1 > 
</itunes:owner) 

<category)Te£fhno logy (/category) 

<itunes tea tegory text'^^Technology“></itunes:category) 

Listing 2: vodcasLxnnJ (Section 2) 

(item) 

<title)HY FIRST KOVIEC/title) 

< i tunes: a litho r ) y o u c name< / i t u nes: aut hot) 

Cde 0 cclptton>Fut any description about this first ibovIg 
here(/descrlption) 

<itunes:subtltle) Put any subtitle about this first movie here 
</llunes:subtitle> 

(Itunesrsuffiaiary) Put any summary about this first movie here 

< / i t unes: suomta ry> 

<enclosure url“"http: //vww.yoursirename.com/iiioviename.ap“ 
length""102^" type^"video/mov" /) 

(gold >h t Lp t / /ww. yours itenaao, com/inovieriaine. iap4</ gu id ) 
(publkie>Sun, 24 July 2005 lOiOOiOO GMT</pubBate> 

(1 1 unes: expli c 1 t>rio</11 nnes \ explicit) 

(itunes: diiratiQn>00:01:10</ltunes: duration) 

(itunes:keyword s>keywordl, keyword2, k(*yword3</itunea;keywords) 
(/item) 

(/channel) 

(/rss) 


Feed your Videos 

For tlie s:ikc of simplicity, we w^ill ,stk:k with Apple's podaisiing 
sjx.-cifiaition, wliich W'orks fine with virtu;iJly ;ilTuv:iila!>le playhick 


Putting it all together 

Once you have populared your XML file and enclosed a link 
to your video file, we can tiegin testing your vtKlcast. T'he main 
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iliing t[) renicmlx^r us thnt your feed is represented by the XMl 
file you created fVsr your vodcast. I'heretbre, whether you are 
using jTunes, Fire Am, or another syndicuted video player, all you 
need do is insert the URL pointing io your vcxloist^xml file, 
which, if you are using the supplicxj template and Fersonal Web 
Sharing, should http://1 27,0.0.1/-YourUserName/vodcastxnnI . 

tJsing iTunes, you may test your votlcasl liy going to Advanced 
> Subscribe to Podcast and tlien entering your feed UHL in 
the resulting dialogue Ixjx (Figure 4). I he subscription process is 
almost identical fijr DIV and FireAm, Ixnh ol' wliitii Itave an Add 
Channel button allowing you to enter your feed URL. 



Figure 4. Subsoibing to a locally hosted test vodcast m iTunes 


DTV and FireAnt: Cures for the 
iTunes Vodcast Blues 

Currently, iTunes: (version 5,01) rtpresenLs u jxxir viewing 
and browsing experience for tfie wealth of video feeds available. 
Tlie LLMS also falls short with a fair, yet poorly oigani?:ecJ sampling 
of .syndioiled video content, which one can only get to through 
extensive searching. Wfuit Is more, iTunes version 5.01 plays 
vodc-ast content, by default, in the miniscule “allium art" pane 
Rx'itred in the lower left corner of the Hunes interlhtc (Figure 5), 
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Figure 5. Default iTunes vodcast playback 


To Apple's credit, you can click on the movie in the newly 
renamed song-arlwork-video viewer m t)pen a se]>ara!e and 
re.six;ible windtxw (Figure 6). Tliis solution is less than ideal 
inasmuch as the floating video playback window obscures ihe 
i'Fimes interfac:e and is easily lost in the background. As you can 
imagine, this can be annoying and is entirely unnecessary as the 
music video playback niotlcl, seen in Figure 7, demonstmte.s that 
Apple has already develojxd a better playbath soluiton. iTunes 
also lias the option for full-screen playfxick, but this is not rfx> 
well suited for shorter videos that tend to be highly compres.sed. 





Figure 6. Tlie iTunes disembodied playback window 































































Figure 7. The way vodcast playback should be-Default 
ITMS music video playback. 


1)W (http://participaiorvculture.org/download.php) and RreAnt 
(http://getfifeantcom/) fx^tter alternatives fortJiosc' wisliin^> to 

i'et t]ie Rill experience of vtxlcasiing with accompanying clirecior)^ 
and ajinmiiniiy resfnirces. Ikxh sup|X)rt a wider range of media 
formats relative to iTunes and also mme witli a nice seleaiun of 
content or “Cliannels" to get you sraited, 

FireAnr grew out of tlie video blogging comnuinity at Yahtx) 
Groups ( http://Qroups.yahoQxom/group/videobloQQinQ/ ) and was 
tleveloj^l ill tandem with tlie nascent a>minunity of vidi^i 
bloggers, Kurthemiore. their solution was in the works Ixfore 
[XKic*Lsiing m\s adapted by jTuaes. U is thejefom not surprising tliat 
I'ireAnt lias several iinit|ue community oriented ieatures such as 
Comment and Mail Post URL to a Friend. Supjxm for lag- 


Irased searching of diretlory cmieni fn>m 'r'ahcx), RreAnt. 
Del.ido.as, and MeFeedia diimories represents anoilier unkjue 
team re of tliis appliration. Fire Ant ex^en offers die option of syncing 
your vodcasrs with ffunes. Under die luxid, FireAnt Ixiasrs a plug¬ 
in engine, allowing varkxLs additional medki fonnats like Flash to lx 
used as vodrast encfosures. Tlie cxily diuwlxick to FiteAnt is dial, 
unlike mines and DIY, you fiave only tliree sizing optioas (small, 
large and maximum) for playlrack and switching Ixiween iheni 
restaas die video Ixing played. Otherwise, FiieAnt ofTeis a ridt 
view'ing and browsing plaLfonn for vodcast media and Is a must 
luive for Linyone serious alxiut vodcasting. 



Figure a NaiKy Sinatra does FireAnt with tag-based searching! 

DTY is anodicr excellent vrxlaist pladbmi for tlie Mac and 
offers a more jxiied down, but very’ fnnctioail set of features relative 
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to FiruAru. FirM off, tag-bused searching and ctmniiiinity-oriented 
tiinctionality are not available as of this writing. Nonet heles.s, D'lV 
tias a simple and intuitive interface that allf>ws for real-time video 
resizing. As an open .sourc'e pnijea, DTV Ixrnefits from the nipici and 
rf))'>ii.st development cycle asscK'kiied with this development 
paradignt. Further, Partieij)atory Culture Foundation, the 
organization ix^hind DIV, offers a server-ba.sed Broadcast Machine 
( http://participatQryculture.org/bm/) -a .scalable sotulion for lx>th 
individuals and larger wcjrkgnnips looking to automate or otlierwtse 
streamline their vodetst production. Future versions of DTV will lx: 
loused on VLC, a great open source video player that comes %v!th all 
the c'oclec's needed to view ihc wide mnge of vcxlcast conteni. 

Content i.s King 

Many of rexlay s jx>f7ular ajntent pnxlucers like Steve Giirlleld. 
of http://steveQarfield.blQgs.com/ . were [)ioneering lniernet-ba.ml 
video media as early as 19971 Steve's Vkg Stxip Ls higlily 
rec'omiix^nded as an intnxiLittion to tlie conimunily oj' vkleo 
bloggers. 1 Ising a fonnat simikir to Qjmedy Qminrl's Talk Soup, Vlog 
Soup offers lularious exce^rpLs of v^ttious cxiaitl video blogs with 
ecjiially humorous axtunenUrry' by Steve. Another .star of the indie 
vodcust scene is HcK’ketikx)!!! ( http:/AAWW, rocketbQQm.com/vlQa/ ). a 
daily news jmgram with correspondents all over the glolx-, whkii 
features classic axnedic fX!rtomnances by host Amanda Qjngikin. 
XOLO TV (http://www.XQlQ.tv/ ) Is anothcT news-,style vodetst, with 
partiailariy compelling interview's done by Galx^, the host cjf the 
cast. Mac-Meads (myself inciuded[) will enjoy the Mat'lA/ vixlatst 
( http://live.watchmactv.CQm/ ) witli content ranging fiom OS X software 
tutorials to ledino-lusty advertisements of Apfile prexiuos. 



Figure 9. Previewing RocketBoom episodes in DTV 

Vcxlcasting and asstx.iated syndicated vkleo teclmologies art: 
ntxliing, in and of themselves, if jxxjjjle don't use them. Tliejv is a 
wide range of videcj tx)nteni available and just wadding through it 
can be quite a job in iisell. Not lo worry, though, since ix>ih D1X 
FircAni and to a lesser extent the FIMS, offer an aggregation of 
ctmtent to gca you started. I low^ever, to really get a sease of what 
is out there, you will w^ani to explore the wide variety of diratory 
services and txjmmunity oriented forums. 


Directories 

http://del.ido.u5/ 

Delicio.us bills il.self as a socuil Nxikmarks manager and is one 
oi' tlx" mast popular directory' services for vcxlcasting cx)ntenL [| 
allows users to cfe;ite a personal link ct>llation and add metadata 
ro characterize their cx)nlenr- Aiso avaiLible are scxial fcirtuies that 
enable you to brow,se the collectt( ms of other usei^ and otIierwi.se 
share information. Further, iheir API (http://delJcio.us/doc/api) allows 
develoj^ets to Ixiter integrate their content with dcl.krio.iLs spec'ific 
lags as demonsmaed in FireAni (Figure 8). 

htt p://www.mefeedia.CQm/ 

With the claim of lieing the first video aggregator, Mefeedia 
certainly lias lots to offer with a rcibusi set of scxial features, 
custom tags for content and instructional informaiion. What is 
more, they even helf) you host your vodc'ast, all for free. Like 
DcIJcioALS, Mefeedia's tag-based .searching is integrated into 
FireAni and is available to developers. 



Figure 10. Surveying the damage of hurricane Katrina as \ 
browse popular vodcasts at Mefeedia.com 

http://video.search.yahoo.cQm/ 

Yahoo has long played host lo many in the vcxlctisting or 
video blogging community and, ikji .surprisingly, offers a 
capacious seleclion of conteni. Additionally, Yahoo offers a 
lagging system, which like the Iasi iwo direclories detailed, is 
integraled with players like Fire Ant. Fcrljaps more interesting, is 
the Yahoo Groups community' for video bloggers thal will Ixr 
derailed in the community links section to follow, 
http://vlQQdir.com/ 

J'hi.s direciory offers a nice selection of vodc asts with some 
of the social clemenis iliar have Ixxome so [ajpular anumg 
video fdog directory services. 

http://Qetfireant.com/dlrectQry.php 

One cjf the most active groups dev'eloping .solutions lor 
vrxkiisters, FireAni also offers a Lagging system and direciory serviof 
tiKit has drag and drop subscribing functkJnality wirh rlieir player. 
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Community, Hosting and Instructional Sites 

http ://grQuos vahooxofn/uroup/vIdeoblogginQ/ 

is one of the oldest and lar;^esi online coinmunilies cif 
vodnisters on the Net and is definitely worth a look. KireAnt, as 
well as, many of today's top bloggers got their sUirt here. 

http://brip.tv/ 

Not unlike sonK" of tlie diimory services covered, blip.tv 
allows for sharing and viewing of vocbisfs, along witli free hexsting. 

http://videoblQgQinQ.info/ 

Tlus site offers unique ctjntent sncii as a world map of video 
hlfjggers, in addition to instructitaial anit:les, siippon, and an array 
of useful community links. If you need a hexsting solution, look 
elsewiiere as this site does not offer any such servicers. However, 
the site does supply usefiil infomiation gleaned from die major 
video blogging communities and is tlterefore w(Mth a look. 

httD://www.Qurmedia.orQ/ 

Ounnedia is a grrat site for obtaining all types of content, 
including vcxicasts, and represents anothcM- liosting solution for 
sharing your videos and other media, luirther, links to UiloiiaLs 
and support are also available. Ourmedia is a great twerall 
solution for users wishing to explore, create and publish multi- 
media content and siiare it widi a growing communtry' of users. 

http://www.freevloQ.QrQ/ 

A wonderful and fun resotirce, freevlog.org represents the 
heart and soul of the vodcasting community w itli iLs rich array 
of instructional material and links to free liosting space to ixioi. 
If you plan on doing any vodcasting, I liiglily encourage ytiu to 
visit tliis site as it really does a wtinderful [oh in guiding you 
through the w'hole proc'ess, from content creation iti hosting. 





Figure IL Freevlog will help you to become a vodcast 
kung-fu master! 


Say you want a Revolution... 

Wltether you call it vodcasting or video blogging, there 
are certainly no signs of this new medium and paradigm for 
media syndication ebbing anytime soon—quite to the 
contrary. Expect iTunes to further integrate vodcasts into 
their feature set and provide additional categories in the 
ITMS, so as to offer better lirowsing and differeniiation of 
vodcast content from audio podcasus. Given the fact that 
Apple has recently updated their iPod [>ateni filing to add 
coverage of a video player, it is likely that, in tlie secrecy 
characteristic of the new Apple, Jobs and company are 
working on a video iPod and an accompanying content 
aggregation and distribution scheme, possibly with larger 
and more traditional broadcast companies. 

Hither way, it is certain that vodca,sling will increasingly 
blur the lines between TV and Internet-based media. With a 
trend toward more niche conleni, w'e may indeed see a 
phenomenon akin lo the explosion of print news outlets in 
the 1900s (between 1910-1914 the number of U.S. periodicals 
peaked with 2,600 dailies and 14,(X10 weekliesf), btii with a 
Century twist. Unlike iradiiional broadcast media, 
vodcasiers tend to aggregate themseives into a community 
and use the medium mil only for production of mainstream 
content, )>ut also for interaction with friends and family. This 
type of personalized approach is retVe.sliing and a boon in an 
age of globalization with little social and inter-group contact. 
With the barrier to entry tjuickly receding, alternative 
syndicated media technologies, like vodcasts, will be well 
poised to compete with '"mainstreaiiT media as an interactive 
populist force that may well overtake or force a major 
paradigm sliifi among the old guard of today\s media 
conglomerates. With little differeniiation among the major 
content providers, the chorus of fresh new^ voices among the 
independeni vodcasting set is sounding .sweeter by the 
minute! 

ww 


About r^e AuT*-or 

Emmanttel Stem has been an awid Mac user sime 1984 and has honed Ins cross* 
platform skSs whSe woHdng at Frme Telecom, Tmw Magaime and Reed- 
tkevkf. He has recently started Ins awn Maccentrk consulting company, 
MaeVerse, winch offers anplementatian, system administration and development 
servkes geared towards the enterf^ise market As a (Selmd GHU/lmx ^ek, 
he ergoys hacking open same software and expermentmg with new open 
source projects an OS X, Kilt may reach him at nm(verse@mac(om 
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Collections and 
Contemplations 

IT TYPES FINALLY GET A ROOM OF OUR OWN 


S O after the last series we saw here, I thought that I’d devote 
this column to a collection of items that aren’t enough to 
merit their own columns, hut still of use to Mac IT Admins 
and Mac Geeks in general. 


iTuncs 



while iTunes is indeed a wonderful thing, 
liiere arc asptxis of it that can l>e annoying on a 
network in large numbers, espctially the iTMS, 
Internet Radio, and Music Sharing. Luckily, all of 
tiicsc ran lie managed, some of tliem centrally. 
Witli iTunes S, you ran now set prefeamces for 
accessing Podcasts, the i'TMS, and Sliarcd Music 
rn)fT! within the ihireniar seciion of the iTunes 
preference. Yes, 1 know that doesnT cover Internei 
radio, but if you l(M)k in the "Genenir sc'ction, you 
see the conii'ol for showing or displaying Internet 
Radio. Finally, you have fuitlier controls in the 
“Sharing” seciion. 71iese sectioas are shown in 
figures la - Ic tudow. 



Figure la: iTunes S.X Parental Controls 
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However, you still have to get those preferences oitt to the 
user's machines. For titai, you really, tmlly w'unt to use 
Workgroup Manager and the MCX (Managed Client for OS X) 
capabilities that allow you to push out individual preference 
files. I would go into the details of how to use this w ith il'unes, 
but as it turns out, I don't have to. Instead, go to tile .Mac site 
of John DeTmyc. Apple SE and MCX wizard extraordinaire. Go 
U] his downloads section, select “Latest_Tips”, ”Tiger-tips" and 
download the “mini-tandt-itunes5,pdr dcx:iiment. It will show 
you how to use Wt>rkgroup Manager to manage iTunes for 
everything but Internet Ratlio. 

Nt>w, that's no! a minor issue. Internet Radio is jioLenLjally 
a huge bandwidth hog, esfiecially if you multiply each 
cxmneclion by a coujile hundred or thousand u.sers. Htwever, 
there's two ways to deal willi this, one elegant, but rec|uiring a 
more advanced firewall, and one thafs not so advanced, liut 
works well nonetheless. 

The elegant way is to block the initial retjuest from 
iTune.s. As it turns out, iTunes makes all its initial requests for 
things like Internet radio and the iTMS as hnp connections. 
In those connections, it has a user agent, that, on my machine 
shows up as: User-Ageni: iTiinL's/5.0.I (Macintosh; PK). 
So, if your firewall/roiiter setup is able to handle higher level 
filLering, you simply tell it to block all oulboiind HTTP traffic 
where the User-Ageni coniain.s ‘^iTunes’'. Thai block.s all 
versions, all platforms. At that point, your iTunes traffic is 
now local “ only. Note: While 
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Figure 1b: iTunes General Controls 

Iherv are a lot of very complex tools to discover thin^^s like this, 
my personal favorite here is tcpjlow, available via DurwinPt^rts 
at http://www,darwinports.org/. 

If your firewall/router setup isn't able to do this, then 
there*s a simpler, albeit uglier way. Block 1'CP ports 8000- 
8999 and i2000-42999. Thai will prevent any iTunes Internet 
Radio streams to your network* Dciing the i'l'MS is a little 
irickier, since that all happens over ports 80 and 443, and If 
you bkK’k those, youVe effectively cut off the World Wide 
Wef). However, if you kill access to '’phobos.apple.com", you 
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Figure 1c: iTunes Sharing Controls 


on l)lock off the iTMS, at least until Apple changes the DNS 
name of the ITMS, 

To block music sharing, (say if you don't yet have all your 
machines on ITunes 5*x yet), just set the firewalls on the 
individuaJ Macs to block all connections on TCP port 3689. (This 
can be done any number of ways, from shell to Applescript; the 
specific implementation is really up to your individual 
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end tell 


preferences and skillset. You c^n also do it as pn of the 
imaging process for new machines, and lei attrition handle ii for 
you.) tf for no other reason, the fact that iXunes 5 lets you l)kx:k 
everytliing but Internet Radio with relative case, is a good 
reason to upgrade. 

AppleScript Tricks 

So, as many who know^ me can attest to, my .sig file in 
Entourage is huge and varied. However, 1 got rather lirvd at 
typing diem in nKinually alt the time, so...AppleScript to llic 
rescue. I have two scripts that liandle signature creation, one 
from within emails in Entourage, the other for things I see in 
Safari dial are theft-wordiy. 

The Entourage script is fairly simple: 

get theSigTitleRecord to display dialog ’‘Enter a name for 
the signature" default anaver "RandomSig 1 " 

set theSigTitle to text returned of theSigTitleRecord 

tell application "Hicrosoft Entourage" 

try 

stt theSelaction to the select loo as testt 
set theSelectlon to ^ ^ return & 
theSelectlon 

make new signature with properties 
Iname: thaSigTlile, 
content ^theSelection, include in 
rand cun: true 1 

end try 

end tell 

The first part is easy. We display a dialog iliat asks for a 
name to tx* used for ihe signature, with some default text. 
Dialogs all return a record, so we grab die "text returned" fiekl 
of that rceord, and put it in theSigTitle. 

dlie rest all happens wtdtin Entourage. We gel the selected 
texl, drop it into theSelection, and make sure it's plain text. 
We then set up the sig format in theSelection, which by RFC 
is "—<spacc><remrn><sigtexl>". With Entourage, you need to 
use the return kcyw’ord, not die \r escape for returns. We 
then creaie a new signature with the required propeities; name, 
content, and is it in the random list, (yes). By wrapping it in a 
iry block. I deal with any en’ors. There shoulil lx some error 
checking to kxik for me I tying to run diis script without selecied 
text, but since Em die only ime (until now), wlio's using it, it 
hasn’t lieen a l)ig deal. 

The Safari version is similar: 

aet noSeiectedTexEFlag to 0 

tell application “Safari" 

aet thoText to (do JavaScript 
“getSelectlouC) “ in document 1) 

if tbeText then sorms sites with 

fcames don't allow for thr^ 

JavaScript above* eo copying is the 

rix 

tell application "Safari" to activate 

tell application "System Events" 
tell process "Safari" 

keystroke “c" using 
Icominand down I 

delay 0.3 

set theText to the 
clIpboard 
end tall 


end if 

if theText " then 

display dialog "You need to have 
something selected I" 

set fioSelectedTextFlag to 1 

end if 
end tell 

if noSelectedTextFlag 0 then 

set theSigTltleRecord to display dialog 
•"Enter a name for the signature" 
default answer "RandomSig 1" 
set theSigTitle to text returned of 
theSigTltleRecord 

tell application "Microsoft Entoiirflge" 
try 

set theText to ^ return 

^ theText 

make new signature with 
properties 
(name: theSigTitle * 
content r theText. 
include In 
random;t tuel 

end try 
end tell 

end if 

As we can see, ihe script only has a few changes. The 
finst line is a flag for some error checking that I added to the 
script, and defiiults lo 0. In the .Safari section, we first try to 
use JavaScTipl within Safari to gci die selected text and put 
it in theText. If that doesn’i work, and it often doesn’t, we 
then re.sc>rt to the quick *n' dirty UI scripting method, and 
have Safari act a.s though we liit cmd-C to get the selected 
text onto the cliplKKird. That is then clumped into theText. 

Tile next line is a c]uk:k error check. If, after all that, 
theText is still empty, then we cii.splay a dialog Informing 
ihe user that hey, this won> work so well wnthcjul actual 
selecied text, and it sets noSelectedText to 1. From 
there, we check to see if noSelectedText is 0. If it is, 
then we create the signature. If not, then we don't and the 
script ends. 

True, neither of these scripts are all that complex or ’'work 
- oriented" but they do give you some ideas of how to 
acetmiplish the same thing from two different angles, and 
some very basic introduclion to using JavaScript and UI 
scripting in die same AppleScript. Besides, its fun to have a 
large collection of pithy .signatures. 

Microsoft Office 2004 Service Pack 2 

while there are always arguments for and agaimst 
applying a seivice pack or update, if you use Hmourage in a 
Microsoft Exchange envinmmeni, run, don’t walk to apply 
this. It has a host of fixes anti changes for Exchange users 
that people have been asking alxjul for .some time. It doesn't 
do everything everyone wanted* but it hits a lot of issues like 
delegation, folder sharing, password change messages, sync 
speed, GAL usage, quota management, and Public Foklers 
right out of the park. 

As well, the Entourage Weblog, at http://blogs.m£dn,com/ 
entourage/default.aspx is no longer dormant, and has a biindi 
of really great articles about Entourage's SP2 changes. There 
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are some fixes to the rest of Office, but after all, Enlourage 
is why we really buy Office, riglit? (Tm so getting in trouble 
for that ;-) 

Conclusion 

Again, ntJthing major here, jusi some small "storylets"’ llial 
IVe had Ixuincing alxnit for a l>!i, and decided to turn into a 
colutnm Sometimes, you just have to go light. 
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tAPPCESCRIPT ESSfNTIALi^l^enramln S. Waldie 


Introduction to 


Scripting iCal 

j 

1 pH or the past couple of articles, I have discussed scripting specific 

1 ^0 applications. By now, you should be starting to realize 

1 * AppleScript terminology varies from application to application. 

1 Some applications don’t support AppleScript at all, some are more 

1 scriptable than others, some have more confusing terminology, etc. 



1 Even as become more knowledgeable as a scripler, you will find that 

there is a learning cuive whenever you need to script a new 
application. Browsing the application’s dictionary, and any 
accompanying documentation or example scripts is usually your best 

1 bet for learning how to script a new application. 

1 ^ - 



ii This mondi, 1 will conliniie to discuss 

i j)ppliaition-syxx:iftc scripring, and this lirm', 1 will 
r(x:Lis on iCal. Please note that all sample a)de 
within this article was written and tested w'itli Mac 
OS X Tiger 10.^.x. Many times, softwart* updates 
will introduce changes in the AppleStrripi 
lemiinology of a given applitraiion or [ircxess. 
'fherefore, if you are using an older system, some 
code may not work pRjpeiiy, or may need to lx; 
adjusted slightly to work on yoLir machine. 

Working with Calendars 

Let’s Ix^gin by discussing the Ijjghe.st-level class 
wiihin iCaLs ol7jec:i hierartliy, a calendar. In iCal, a 
calendar contains evenLs and to do's, which we will 
discuss a Utile later. For now, let’s talk alx7ut 
(Teating caienebrs, Uxtiting them, and more. 

Making a New Calendar 

More than likely, you are working witli existing 
calendars witliin iCal, such as a ‘"Home” or *'Work’' 
calendar. However, should you need to, you do 
have tile ability to create calendars via AppleScript. 
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iCnl actually contains a command speciftc:ally for 
creating calendars, called simply enough create 
calendar. 'Hiis command lia,s an optional parameter, 
which w'ill allow you to specify the calendar’s name. The 
following sample code deinonstnites the cTcalion of a 
c'alenckir with the use of this exanmand 

teil f3ppl!c;3t:XprJ 

create calendar with name "My Calendar" 
end tell 

One tiling u> take note of when using this coinmand is 
tliat it iloes not produce a result, lleixiuse of tliis, you cannot 
place the newly crexiied cilendar into a variable for llitiire 
reference. As an alternative to the create calendar 
commantl, you can also use the make tx>mniand, lliis may 
be a Ix'tter choice in this situation, as the make coEnmand 
dex^s produce a result, that result Ix-ing die newly created 
item. For example, die fidlowing code denionsmates how the 
make command can lx; used to create a adendan In diis 
example, the result of this command - the newly cTcated 
calendar - is placed into a variable called theCalendar, 
which I can now reference later in my scTipt, 

te^ll application 

set thoGalendar to raakc* now calendar with 




















properties (title: "My Calendar'* 1 
end tell 

-> calendar 3 of application '"iCal" 


Gretting a list of Calendars 

W you are workinj^ with existing c:alendars, you may 
need tr> write code iliai will retrieve a list of tliese calencLirs. 
Tlie Ibllowing code demonstrates liow to retrieve a list of all 
existing calendars. 

tell application "iCal" 

set theCalendara to every calendar 
end tell 

> I calendar 1 of applicat ion “iCal", calendar 2 of 
application "iCal", calendar 3 of application 


'file previous code will return referenees to your 
existing ctilendars. However you , may only need to 
retrieve the names of your calendars, 'fo do iliis, simply 
retrieve the title of every calendar. For example: 

tell application “ICal" 

set theCalendarl^aroen to title of every calendar 
end tell 

-> I "Home", "Work", Calendar"! 


Changing Calendar Views 

Within iCal, you have the option to view calendars in 
several different ways. You can use scripting to change 
calendar views as well. The following example code 
demonstrates liow to change the calendar view to display 
in day view mode. 

tell application "iCal" 
awl tell vli^w to day view 
end tell 

The following sample code demonsirales how to 
change the calendar view to display in week view mode, 

tell application "iCal” 
switch view lo week view 
end tell 


Tlie following example code demonstrates how to 
change the calendar view to display in month view^ mode. 

tell application "tCal" 
switch view to month view 
end tell 

So, witli the use of the code alx>ve, you can actually 
customize tiie viewing experience of iCal for the user, as 
your script pn>cesses. 

Subscribing to a Calendar 

In addition to creating calendars, you tun also write 
cocte to subscrilx^ to a calendar, using a calendar URL. 


The following code demonstrates how this is done. 

tell applic£ition "iCal" 

GetURL "vebcal: / /ical.mac . coin/lcal/DVDs. Ics" 
end tell 

Piatsc note thiit, when sulmril>ing to a ailendar via 
AppleScript, .some manual intervention will be rccfuired. iCal 
will pop tip a few cliak>gs, allowing users tc) confirm that they 
actually do want to subscrilx.* io the ailendar, and also 
allowing them to c:onfigure sufiscripcion .settings. Sex! figure L 


Subscribe to: wcbcal://icaLmac-CDm/lad/DVDs.ics 

Cance! ) f Subscribe ) 


Figure 1. Calendar Subscription Dialog 

Working with Events and To Do’s 

Now ihat we have discussed calendars, let’s talk about 
elements of calendars. Specifically, we will w^alk through 
several tasks invtjlving events and to do's. 

Making a New Event 

Like calendars, events can be created with 
AppleScript. To do tliis, use the make command. When 
creating an event, you will most likely w'ant to specify 
values for various attrihutes of that event. For example, 
for an event, you may want to specify the event's name, 
de.scription, location, etc. This can be done as the event 
is created, with the use of the with properties 
parameter. Tlie following sample code demonstrates how’ 
to create a new all-day event for the current day, with a 
specified name, description, and l<x:ation. 

tell application "iCal" 

tell catendar "My Calendar" 
set iheOate to current date 
make new event at end with prnperties 
I description:"Event Description", summary:"Event 
Name", location:"Event Location", start date:theDate, 
allday event:true 1 
end tell 
end tell 

“> event I of calendar 3 of application "ICal" 

To crciittf an event that falls wiiliin a specific time 
period, you may specify ihc start date and end date 
propeities of the event. For example, ihe following 
example ccxle will create an event at ilie current date and 
lime, with a length of 2 hours, 

teii application "ICal" 

tell calendar "My Calendar" 

set theCurrent-Date to current date 
make new event at end with properties 
{description: "Event Description", stunmary: "Event 
Name", location:"Event Location", start 
date: theCurrentDate, end date;theCurrentOate I 20 * 
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minutes) 
end rell 
end tell 

event 1 of calendar 3 of application 

Making a New To Do 

The process of creating a to ck> is virtually Uiu ^ame 
as that of creating an event. Again, you can use the make 
command, and you may optionally specify properties to 
be applied as the to do is created. 'I'he following sample 
ctxie will create a to do with a specified summary, 
description, and due date* 

tell application "iCal” 

tell calendar “My Calendar” 

set theOueDate to (current date) + 30 * dayn 
make new todo at end with properties 
(description:"To Do Description", summary:"To Do 
Name", due date:tbeDU 0 Date} 
end tell 
end tel 1 

—> todo 1 of calendar 3 of application “iCai" 

To find a complete list of event and to do pmperties, 
consult the appropriate class in the iCal suite in iCafs 
AppleScript dictionary. 

Finding an Event or To Do 

Many times, yon may he working with existing events 
or to dos. If iliis is the case, then yoii might need to 
locate the appropriate event or to do in some way, 'fhe 
liest way to locate something in iCal is to do so by its 
unique ID. In iCal, cralendars, events, and U> do's all have 
unique ID'S, which can lie rerrieved by AppleScript from 
the item's uid propeity. The following sample code 
deinonstraies how to retrieve the ID of an event. 

tell applicatlun "ICal" 

tell calendar "My Calendar" 
set IheEvent to first event 
return uid of thelvent 
end tell 
end tell 

-> "1BCA3512-F3A9 4BCa-AOFD-BE812968D37 i ” 

If you have the ID of an event or to do, you nin then 
find the Item by its ID, The following code sliows how 

to locate an event by its unique ID. 
tell application "iCal'* 

tell calendar "My Calendar" 

sef theKvent to firnt event whose uid — 

" I BCA3512-F3A9-4BCB-AOFD-BE812968D3 71" 
end tell 
end tell 

—> event 1 of calendar 3 of application *’iCai" 

This same technique may lx? u.sed to locate a to do 
by its unique ID, 

Viewing an Event or To Do 

AppleScript can also he used to display a specific 
event or to do within iCal. To do tliis, use the show 
command, and specify the item that you want to display. 
For example^ the following sample ctxle will cause iCal to 
display and select a specific event, which, in this case, is 


stored in a variable named theEvent* 

tell application “ICal" 

tell calendar "My Calendar" 
show LheEvent 
end tell 
end tell 

Deleting an Event or To Do 

Just as you can create events and to do's in iCal, you 
can alst> delete them. 1b delete an item in iCal, use the 
delete command and specify the item that you want to 
delete. For example, the following code will delete a 
specified event that is stored in a variable. 

tail application "iCal" 

r.Gll calendar “My Calendar" 
delete theEvant 
end tell 
end tell 

Working with Alarms 

If you are an avid iCal user, then you are i>rolxtl)ly 
already aware that events and to do's can be cx>nfigured wiili 
alamis. There are multiple ty(X"s of alaims that you can 
configure manually, which c<in also lx configujtxl via 
scripting. AppleScript can lx u-scxl to create the following 
t>-'fxs of alarms: 

• Display Alarm - This type* of alann will display a 
ines,srige to the user, letting the user know about a 
scheduled event or to do. With tlie use of .scripting, you 
can set die trigger inierval or date for tliLs type of alarm. 

• Mail Alarm — Hiis type* uf alann will send an email 
message to the ctirrent u.ser, notifying the user of an 
upcoming event or to do. I.ike a display alarm, the 
trigger ckite or interval for this type of alarm may be set 
via scripting, 

• Open File Alarm - Tliis tyjx of alarm will o(xm a file 
at a specified time. AppleScript can he used tf> set the 
date or interval for the alarm. It can also be used to 
specify the path to the file Uiai .shoitld be opened. An 
alarm of this nature can Ix extremely u.sc?ful if you 
want a script to trigger at a specific time. 

• Sound Alarm — 'lliis tyfx of alarm will produce an 
audio alert about an upcoming event or to do. For this 
type of event, AppleScript may lx used to specify the 
dale or interval, as well as the name or file path of a 
sound to lx used for the alert. 

Adding an Alarm to an Event or To Do 

Let's take a moment to look at how an alarm can 
be created with the use of AppleScript, for a given 
event or to do. For this first example, we are going to 
LTcaie a display alarm, The following example code 
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will add a display alarm to a specified event, 

tell applicatioa "ICal*' 

tell calendar **My Calendar*’ 
set theEvent to event 1 
tell theEvent 

make new cl display alarm at end with properties 
I trigger Intervalr*30i 
end tell 
end Lell 
end tell 

—> display alarm 1 of event 1 of calendar 3 of 
application **iCal 


In ihc cxxle atove, you will notice that the trigger interval 
property of die event is set to -30. Tlic trigger interval 
property* may lx* sjxeified to configure wlien the alami 
message should be displayed* This pn^perty should fx given 
a nunxrie value, signifying minutes. In this case, I have 
specified a negative value of 30* This will cause the alann to 
trigger 30 minutes prior to tlie start date of the event. 

Optionally, T can choose to specify a trigger date for the 
alarm, rallier llian a trigger interval. 'Hits will allow me to 
c:onfigiire the alann to trigger at a specific date and time, 
rather than on a trigger interval. The following sample code 
will create a new display alann for a given event. 

tell application "iCal” 

tell calendar ""My Calendar** 
set theEvent to event 1 

set theDate to (current date) - 3 * days 
tell theEvent 

make new display alarm at end with properties 
ItrlgRet date:1:het>ate 1 
end tell 
end tell 
end tell 

-> display alarm 1 of event 1 of calendar 3 of 
application “iCal*' 


Let's kx)k al another type of alann. Tliis time, lefs 
add an open file alarm to an event. For this type of alarm, 
in addition to specifying a trigger interval or date, we can 
specify a file path for the item to lie opened, 'fhe 
following example code denionstrates the process of 
creaiing an open file alarm for a given event. 

set theFlle to choose file 
tell application **iCal" 

tell calendar “% Calendar" 
set theEvent to event 1 

sat theDate to (current date) - 3 * days 
tell theEvent 

make new open file alarm at end wt th 
properties (trigger date:theDate^ rilepathstheFilel 
end tell 
end tell 
end tell 

—> open file alarm 1 of event 1 of calendar 3 of 
application "iCal** 

If you lo(jk in iCal’s dictionary, you may notice that 
the filepath property of an o|>en file alann is defined 
as needing a POirllX style path. As you can see from die 
code above, if you pass an AppleScript alias referenc’e, 
that will work as well. To pass a POSIX patli, yt)u may 
need to convert the desired file's padi. For example: 

set theFile to POSTX path of (choose file) 

-> ”/Users/hwaldl e/Desktop/EileToOpen , sept ** 


Pteise note that if you configure an open file alann 
to open a cxmipiled AppleScript file, ifie script wiJl 
actually lie loaded and run by iCal, rather than simply 
f)penecL See figLire 2. Tlii.s is a great way to create a 
workflow with scripts that trigger at .scheduled intervals. 



Figure 2. An Open File Alarm to Trigger a 
Compiled Script 

Triggering Scripts and Automator 
Workflows from iCal 

As we have seen alxive, liiere are ways to trigger an 
Ay>pleScript from within iQil, Yt)u am ciuickly and easily 
create events, and atkl open file alarms to run compiled 
.scripts, open .script ap[)lications, etc. 

You can also trigger Automator workflows from iCal, 
and Automator miikt!S the process of configuring slk'Ii 
scheduled evenUs a snap. First, iiegin by creating an 
Automator workfiow to perform any set of desired ta.sks. 
Next, select SaiHf as Pfug-In,.. From the File menu within 
Automator. From the plug-in type popup menu, select 
iCal Alann. See figure 3- 



Figure 3. Creating an Automator iCal Alarm Plug-In 
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Click the Ixittorij and a new event will ereatccl 
in iCah which will he c;onrigureci io trigger the workflow. 
Ndw\ you am aciju.si tfie event, as needed, perltaps putliitg 
it on a repeiiting schedule* See hgure 4 ftjr an example of 
a configured event* 



Figure 4. A Configured Automator iCal Alarm 
Plug-In Event 


In Closing 

Hopefully, you are already thinking of the great 
possibilities for creating scripts that interact with iCal, or 


that work in ctinjuncfion wiili iCal* lit addition to creating 
and interacting with calendars, events, and to do's, you 
am also begin to schedule the execution cjf your scripts, 
allowing you to really l>egin putting your computer U) 
work for you, perhaps at night, over the weekend, or 
whenever you are away frcjoi your desk* 

Ft)r a list of some existing iCai scripts, try searcliing for 
“iCar in the Sc'ripi Builders section of MacScTiptt*r,nei at 
littp://scrip tbui l ders.net/ . l*or more information afH)ut 
craning and scheduling Auromalor workflows, clieck out 
ilie liclp files that come wiili ALiU)mator, or check out riiy 
Automator book, available from SpiderWorks at 
http;//www*spiderworLs*cum/ books/aii t omatnrphp . 

Until next time, keep scripting! 
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Core Data 


By Jeff LaMarche 


In the previous two Core Data articles, we discussed how to create a data model and how to 
create, delete, and edit data instances both directly from the user interface and programmatically. 
Those two articles covered most ofwhal you’ll need to do with your application data models. Most. 
But not all. There’s one important area that those articles didn’t touch on. 

In the prior articles, all in.stances of data that we worked with were ones that we created, or 
else were ones that the user took some action upon, so we never had to worry about what piece of 
data we were going to work with. There are times, however, when you will need to retrieve a piece 
of data from your application’s context, but instead of knowing, for example, that the user clicked 
on the row that corresponds to a specific data instance, you’ll know only some criteria about that 
data. For example, you might need to find a book instance based on its title or, perhaps, to find 
all the books by a particular author or publisher, or to find all the books published in a given year. 

Now, certainly, you could create an NSArrayControll er in Interface Builder to represent all the 
instances of a particular entity type and then manually loop through the items it manages to look 
lor the instances that meet your criteria, but that would be inefficient and involve a lot of 
unnecessary work. You’re much better off using the tools Apple gives you for this purpose. 


Fetch Requests 

The niet'himism that you unc lo retrieve duta 
prognunmutically horn ycnir appliaition s or dtx.uiiieni s context 
is trilled (iipj'^ropriately) a Fetch ReifitesL unci is represented by 
the Cocoa class NSFetchRequest. To use this class, you 
instantiate a request object {hen provide il witli llie criteria that 
descrilx's the object cjr ohjecis that you want to retrieve. After 
tiiat, you exeatfe the fetch recjuesL, and it reliirm to you an array 
of NSManagedObjects that nialcli those criteria. Fetch 
retiiiests exist in Injih Fnterprise Objects Fntrticwt>rk (EOF) and 
in Core Data, and function very similarly, so if you’ve used EOF 
fetch njtiuesis or another objeci-rclalional mapping tt>ol like 
Hibernate or Cayenne, this process will seem familiar to you. 


Fnterprise Objects has a veiy' handy class of utility methods 
called EOUtillties wiiich encapsulates a loi of commonly 
used functionality into public static methods (Java's ec|iiivalent 
10 Objective-Cs class melhtKls) that can lx called from 
anywhere. Core data has no comparable class, despite using a 
nearly identical mechanism for retrieving data. 

So, this numih, iastead of building a whole new application, 
we re going to implement a da-ss similar to EOUtillties (but 
much less extensive) adlecl MTCDUtilitles (that stands for 
MucXech Coie DaUi Utilities , if you were wondering). The 
methods we are going to implemenl wdl make it easier to retrieve 
data front your context and also, in the prttcess, will show- you 
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hciw to finJ aod retrieve d:itii from your ^lpplication^*^ rontext 
hiused oil iTitena. MTCDUtilities will have four claas iticiIkkLs 
( much less than KOUtilities) and no instance variables, so you 
will never insUuiiiaie an MTCDUti lilies <ibjcct, but rather 
simply call nitihocls on the class ob^a. 

The conipltrie class we're building is available on the MacTech 
FIT site, with complete HeaderlkK: documentation. Before we 
learn how to sjmify criteria for retrieving tbia, let’s take a tjuick 
l(x>k at retrieving data without cfilena. When you do ntn specify 
any criteria, a fetch rec|uest retrieves aU ilie existing instances of a 
given entity. The first of our lour c'onvenience luethotls da^s 
exactly riuit. Behire wc: write it, let's create our class' heiider, with 
dcclaratioas of the inellKxls we're going to Ixf writing. 

MTCDlItilitiesJi 

lliis is the header for M'fCDllLilitics.Tiicre are m* instance variahlcs. 
just four class methtKl declarations.To save splice, I have not indtidcfl 
the Headcrl>oc c(>nimenis. 

ffittpori <Cocoa/Cocoa*h> 

Jdefine HTTooManyEntitiesRc tu rnedException 
@”Too many entities returned" 
ifdefine HTCort*t)atnExeption ^^Corn Data exception'^ 
^interface MTCUUl t11tias i NSObjeci 


+ (NSArray *)objectaFutKntityNained: (NSStting *)nara€ 
inContext ^(NSHanagedQbJcctContext •)cont&xr; 
f(HSArray ^objectsFotEntityWaToedi (NSString *)(iniiie 
matchingKey I (NSString *)k£?y 
andValue*(id)value 

inContext:(NSHanagedObjeetContext *)context: 

+ (NSManagedObject *)objectForEntityMEimed: (NSString Onamo 
ma UbingKey ^ CNSSt ring *)key andValue:{t d)value 
inCuni ext: (NSHanagedObJeetContext ■') conicxt; 

+ (HSArruy -lobjectaForEnillyNamed: [NSStrlng Mnaflie 
matchlngKeysAndValues: {H$\H c tiona ry *)keyValues 
usingOHt (BOOlhiceOR 

inContext:(NSManagodObjectContext *)context; 

Send 

For now, don't wt^ny uIxjuI my of the mciliods except for 
objectsForEntityNam&dtinContext;, w'liich well be writing 
first. Well w'fite the rest alter we l(x)k at how to sptxify criteria. 

MTCDlJtilitles.m ! objectsForEntityNamediinC.ontext: 

Ihis nicth«>d returns all insLincts of a given entity. 

+ (MSAr [ ay *) obj ect^FotEnt i t yNanted; (KSSt ring *) name 
inContexU CNSManagedObjectContext OcontexL 

I 

// We have to tell the Fetch Retjuirst w^hich entity instances to 
retrieve. We do 

// ilmt using an NSEntit)'Description based on die parameter name. 
NSEn lily Description •eniily = [NSEntity Descripllon 

eiitilyForName.name inManagedObjeetO>nlext:context I; 

// Next, we dedart an NSFetchRetjiicsi, and give it the eniity 
description 

MSFatchReque^t 'req = [ [KSFetchRequest alloc] inlLj: 

[req setEotity;entity ]; 

//JU:fotv executing die fetch acquest, we declaa an NSError 
// which US usetl to find out about any problems cntoiintead 
// executing the a(|ucst 

MSError 'error “ nil; 


// We nexi supply it (by afeance) wlicn we execute the aquest 

NS Array 'array ^ (context execiiteFcftchRequest;req 
error:&error] ; 

// A nil array tells us something went wn>ng 
if (array — nil) 

r 

// We instantiate an exception using the error 
riescriprion from 

// NSErtor, then raise the exception, which stops 
exec Sir ion 

NKHxceptlon 'exception [NRExceptlon 

GXceptionWithName:MTCoreDatnExeptimi 
reason;[error locallxednescriptlonj 
userlnfo:ni11; 

// iJince execution will stop w'hen we raise llic exception, wc 
// need to release any memory befoiTC we do so. 

freq releaise] ; 

[Exception raiuel: 

) 

// Wc allocated it, wc have to release it 
[req releasej: 

// Return rite result set returned from executing the letch request 

return array; 

I 

Now, imy Lime we want to retrieve all the Snsiances of 
given eniity, we can simply do something like: 

NSAcray 'array = (MTCDUtllJlies 
ob j ec t sFa rEnti tyNamed: Book " 
inContext;context!; 

Predicates and Format Strings 

Tliat's all well and gtKxl, but when you want execute a 
fetcli request to reirieve les.s th;m all of the instances, you're 
going to need to tell the request exactly which data instances 
you want to retrieve. The way that criteria are sj^ecified in Core 
Data is by way of something oiled a predicate, wliich is 
represented by the class NSPredlcate and its subclasses. 

An example of a preclicaLe, in plain English, is ''Nanite is joe"' or 
"Age is less tlian 21”. Predicates on be more a^mplex, howtwer. such 
as "Name Is jtx.'' or Tree!' or begins widi tlte letter T and age is less 
diim 21 or parent lias given pennission." llie latter Ls an example of 
a t'ointxjund predicate. Fiedicates are eiHUpletely dlstinet from 
entities and fetch requests. You on tTeatc one predicile, say, "Name 
is joe'” and use it to retrieve all die Petiple entities witli a ntime of 
}oc and then turn around and use die .same prediote to retrieve all 
die lX>g entities named Joe. Prediciles don't know or tine one w^hit 
aix)Ut the enUUes diey are being used to retrieve. 

Predicates can be a,ssembled prtignrmniaiically by t:reating 
expressions, arguments, and stdisiitution variables and 
compounding them into predicates. You will rarely, if ever, do 
this, however, because Apple has provided a much nicer 
nicchaiiism for cTeating prediaites: ihe Foniiat String. 
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YoliVc tisL'tJ foriTuu strings in Oxxki liefope. NSString Iws a 
simiLir meclniinlsni ihal allc^ws you to a*sscmble multiple strings, raw 
claUityiies, and Objeaive-C ohjeci iastanc’es into a single NSString 
using strlngWithFormat The fomiitt strings used by 
NSPredicate are similar, but not exadJy the Siime, as tliofx! used 
by NSString. Botii tyjxjs of lortitit stiings ust^substitution variable's, 
but NSFredicate adds a bit of hirKTionality* Iktuase die fmmx 
.brings used to sixt:ify criteria Im iLs nxKs in SQL (StRiUured Qiiery^ 
Lmguage—the language used ic> retiievc data from datalxuses), 
ijitenmlly ii Ls fairly pkky alxHit certain Linguage constructs. For 
exjiinple, T you (x>niparing a string attribute to a a>nstani value, 
ilie cx^nstant v'aiue must (x tonuiined wiiiiin single quott^. 

Ft>i the most part, however, if you use Ibnrial strings to create 
your predicates, you won't liave to worry' about such things. When 
you use NSPredicate's predicateWlthFormat: metiKKi, it 
wall autornafically do the right thing based on the type of object 
you pass in as a sulnsiitution variabie. If you give it a siring, it wiU 
add the appropriate (juotc^. If you give it a date, it will translafe if 
into the appropriate dale string lor cumt:)ari.son. If you give it an 
NSNumber, it wall leave the quotes off.. 

L>espite llte fact that it is very savvy alxjul dealijig with 
subsiiiLitlon variables, NS Predicate is sUll pick ier alxHit Ibnnai 
.strings than is NSS tring. T\mv am a limited numix*r of ofXTators 
that you can use to create a valid predicate. You citn ilsc* all the 
major C and SQL ojK'ralors that you are accustomed to, such as = 
or lor an equals coni|rarison, > for greater than, < for less-lhan. 

or <> for not equal to, >= for greiter than or ecjual to, and 
for les.s than or equal lo. You can als( j use AND (or OR (or | |), 
or NOT (or I) to cotn|X)und phrases in your Ibrmat string. 

Here are a few examples of creating a [>redicate using a 
Ibrmat string: 

NSPredicJite ‘pretll “ 

[KSPredfeate predicatBWithPorniatage ^ 1 "] : 
NSPrerflcate 'pred2 = fNEPredicate predicateWlthFormat: 

OR name ^ W'. : 

Note that in the first exain]:>]e, I'lii using a constant value 
(21) right ill the format string. You can do this with numbers 
safely, hut not witli strings. You could not, for exanqile, do this: 

NSPredicat# 'pred “ iKSPredicate 

predlcateWltliFDrmat-fname BrarJ j 

Why? Well, remember what i said earlier about 
NSFredicate being picky internally about things like quotes 
around strings? If you don’t use substitution variables, you’re 
responsible for making sure that ytmr constant mulches 
NSPredicate's inlernal format requirements. Since attribute 
name.s cannot lx: made up of solely numlxms, there's no chance 
of confusion between a numlxr constant and an attriliuie name 
or reservetl keyword. The same isn't tme for siring constants. 

In general, it"s Siifer to always use substitutit>n variables, even 
when you're using a coasiant value. If you re curious, the 
following cr)de unll wtjrk (notici? the single C]UOfes), though I don't 
recommend yon make a habit of c'eating predicates this way: 

NSPredicate *pred fNSPrcdicate 

pred icateWithFormat = ■Bob'’*]: 

In addition to the o|XTaiors mentioned alxwe, them ate also a 
slew^ of operators specifically for comparing string ultrilxiies, such as 


BEGTNSWITH, CONTAINS, ENDSWITH, LIKE, and MATCHES. The 
first tliree aa* self-explanatory. Tlie LIKE 0(KTator will lx; familiar to 
anyone who has worked with SQL; It fiinctions idemioally to = 
exc:ept that it allows the use of two wiltkanl chameters. Whem using 
LIKE, the character * works as an unlxirinded wikkiiixl, so for 
eomplc, would nuilch 'wef, *woot\ and ‘well I'd 

like to SGG you again if you permit it'. Tlie ? 
diaratier, on the otlier lumd, Is a Ixiunded. single ctuinicier wildcard, 
so ‘w?t' would iruitch 'wGt' and 'wat' but not 'woof. 

MATCHES is similar to LIKE, except that it allow,s tlie use 
of ftiil regular expres,sions rather than the more simplistic 
wildcards supported by LIKE. Regular expressions are beyond 
the scope of this article, so we want lie discussing MATCHES at 
all, bur I will reiterate my comment from rite first Coa" Data 
article ihar taking the time to learn regular expressions is well 
worth your limt' as a Ctx'oa programmer or OS X ]X)wer user. 

String operators have rwo o[Xional mexlifiers Cc and d) that 
can lx specified in stjuare bnickets imnxdiaiely following ihe 
operator Thc'se can lx* used lo specify (respectively) case 
sensitivity' and diacrilical seasitivity. By default, siring coiiipari.sons 
in Gjre llata are Ixxli casednsensitive and diacritical-insensitive, 
meaning that if you create a predicate 'name CONTAINS bob *, 
you would get Ixick data instances witere the attribute nante 
etjuals 'Bob’, 'bob', 'BOB', or even 'BOB'. Hem is an 
example of creating a ])a‘dicate string dial is ease and dmnitical 
sensitive or, in other w'oal.s, hem’s how you gel ‘Bob’ withmtt 
gening his Gennan cousin ' BOB ‘ or his Swedish cousin * B^sb': 

NSFredicate *prod = iNSPtedicatc predicateWithEornat: 
@"naitie I.IKE[ft]) S@". [ 

Iliere are a few more operators available to you, but the 
ones I've mentioned %vill make up the vast, vast majoriry of w'hat 
yoLi’li use; you nin feel free la investigate the otliers in Apple's 
redicate dc>cuii lenlai ic >n. 

There's one more difference Ixrween ifie formal strings 
LLSed by NSString and ihase used by NSFredicate that 
needs to lx mentioneil: NSFredicate .supports only two 
.subsiiiutitin variables, tme of winch is ntn supported by 
NSString. Both NSString and NSFredicate allow the %@ 
varjahle for substiiuiing Objective-C objects into the string. 
NSPredlcate does not supjxm the fprint-.style format 
variables sueb as %d, %f, or %s. It df)es however, add a new' 
suhstiUition variable not used fry NSStringi %K. 

The %K substitution variable Is usetl fc^r key patlis and 
attribute names, if the name <jf the attribute yoti w^ant to 
compare might change, you cannot u.se %@ to do .so. .So, for 
example, this w'oril work: 

NSFredicate *pred ^ tNSPredicate predicateVlthForntat: 

Tfte reason tJiiil tltis doesni work Ls that NSFredicate 
recognizes the %@ ofxiator only for suhstituiirig mlu(*s not for 
sulisritLiting Mx. When ycxi are S[xx.'ifying an anriliuie name or key 
|X4Lh, you have to use* %K instead of %@. To coriea that previous 
Cfxle example, we simply substilute %K for tile fii'st like so: 

NSFredicate 'pred = [NSPredlcate ptedIcatcWlthFormat: 
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Fetching with Predicates 

Now iliat youVe \yctin iritrixlucecl to prcdicuies, weVe rttidy 
to write the rest of (>ur Core Data utility functions. First, let's 
write a utility nietltcKl for a very common fetch: fetching all 
entities where one p^lrti^ula^ attribute has a particular value. 
Although NS Predicate allows very complex queries, you’re 
likely to find thai tlie bulk of the queries you acmally use in your 
applications are relatively simple, and this method will make life 
easier in those situations. 


MTCDUtilities.m - objects 

objectsForEntkyNaiiieihniatclimgKey:aadValue:lnContext 

+ (NSArray *) objectsForEntityKamtfd ; fNSString *)riaio(in 
matchingKay:(NSStrlng *)key 
and Va1u e:tid)vaIne 

inConLC^xti (NSHanagedObj fact Gout ext *) context 

I 

// Since NSString and NSPrediotc use differeni farmat strings, 

// we use a two-step process to create our fonnat string here 

NS St ting ^predStrine = [RSStrlng st ringWithPorsnat^ 

— %%«** key]; 

NSPredleate ‘pred [NSPredicate 

pred ^cateWlthFortwal ipredString. vaVuel : 

// We still need an entity description, of course 

NSEntityDescription ’entity = [KSEntityDescrlpLI on 
entityForName: namf: InKinagedOb jeetContext ^context] : 

// And, of course, a tetcli request.This time wc give it both the entity' 
// description and the padicate weVc just created. 

NSEetchR^qLip(5r *req “ [ [NSFetchRequest alloc] initl: 
freq setKtiIty: t^ntityj : 

[req aetPredlcutetpredl; 

// We dcclatxr an NSFxrtw and handle crnim by raising an exception, 
// just like in tiie |>fev1ous metliod 

KSError 'error " nil: 

KSArray 'array = [contexL oxecuteFetchRt?quc!f!t:r^q 
error;fiietror] : 
if (array == nil) 
t 

NSRxception “exception = [NSException 
except i onWi t hNatite t MTCo reDa taExep l i on 
Terror locaUzedDescription] 

LisertnfomilJ : 
texceptlon raise]: 

1 

// Now, relciise the fetch request and return the array 

[req release]i 
return array: 


Very handy. Now, we have a convenience method lor 

retrieviriK objud instances maiching a single key/value pair, 

like SO: 

NSArray “results - [HTCDUtilities objectsForEntityHai&ed: 
pe rson" matchingKey:6"1astName" 
and Value: 8"Sniith'* 
inContext:context1: 

More importamly, you now know the basics of creating* a 
fetch rccjucsi using a predicate, so should lie able to trail 

more complex fetch requests for sitiiaiions where this method 
is inadequate. 
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Now, in pnicticc, yoiril likely lincl yourself itsing the 
inethcxl al>ove a lot of liine-s with unique identifiens. In tluxse 
situations, you know you 11 only retrieve a single object, but yet 
yon II still get back an arniy. For siUiaiions where yon know 
there will only \yi a single nintcliing tjbjet't, perhaps antuher 
convenience inethtKl Ls in order 

M rCDUtilitie!i.m - 

ohjectFor£nUtyNanie€l:iiiatchingKey:aiidValue;inContext: 

This meilj<.K.l returns ii siugte object matching a single key/vntue pair. If 
more than one object is actual I y retiinied. an exception Ls thrown, 

r(NSManagedObject ")objectForEntityNampdi (NSStrin| *)rianie 
f(iaiching.Key: CKSSt riii^ *Jkey 
(^ridValue: (Id)value 

InContext: (NSMatiagedOb jectCotitext *) context 


//We call the previous method, then rtiiim the object at Index U We 
// declare no exceptiim handler scy an exception encountered in this 
call 

// will stop execution of this method ami tlm>w tip lo the eotle 
// fnjiii where* it was called. 

NSArray 'array ^ lHTCDUtilitle$ 
objec LsjForEntityKamed: naaie 

matehiugKey:1tey andValue:value tnContexticontexil : 

// If there are moR- than one objects in the array; throw* an exccpti<jn 

if ([array count] > 1) 
i 

NSExceptloii ’exception ^ [NSKxception 

excep11 onWt LttName: HTTooManyEntitiesReturnedException 

reasonmany instances retrieved for criteria'* 
userlnfotnil]; 

[exception ralflej : 

I 

// If there arc nt> objects, fust rctum nil 

if ([array court] 0) 
return nil; 

// Return the ohjeci at index 0 

return (NSManagedOUject ’)farray objectAtlndexrOl : 

Now you1l Ik' able to pull (nick a specilk item wiih aplomb: 

NSKanagedObject 'item “ [MTCnULlllties 

obj ectsForEriiityNamed: S-book" matchingKey : ** 

andValue: [NSNumber nurob^^rWithlnt: 192] 

InContext;context]: 

Notice that 1 passed an NSNumber insieacl of a string? Tiiat's 
not only acccpiiibfe, it's the t*<irrect thing to df> when the 
allrilnilt.' you’re iisinj; is :i numeric value, just as you woulci pass 
an NSDate if you were comparing a dale altribute. 

Compounding Predicates 

hut wail! moa-! If you order in the next ten minules. 

Ml ihniw in tliis Ikt* set of Gmsu^“ knives. Okay, not really, but I 
will throw in one more handy niethtxj. You won t always be able 
to get away with using queries based on a single key-value pair 
S<imetinies you1l need, for example, to pull Ixtck a |X'ison leased 


on a first AND a last name, or pull back all entities of one type OK 
another type. Hiese sitLiaiions are accom|>lLshed with a speciali/jcd 
SLiIxiaas of NSPredicate calk'd NSCompoundPredicate. 

Given any two or more existing NSPredicates, you can 
create a compound predicate using tlie logical operators AND, 
OR, or NOT, You simply ciraie an amy w*iili all the predicates 
yoti want to join, and pass them into one of 
NSCompouiidPredicate's convenience clas.s inetkxis like so: 

NSArray ‘pr^dx " [NSArray arrayWithObj&cte: 
predl *pi:ed2. nU] : 

NSPredicate 'noLPred = [NSCompoundPtedlcate 
notPredicateWlthSubpred Itateiirpreds] : 

NSPredicate 'andPted = [NSCcunpcmndPredIcate 
andPredlcateWithSubpredicates:preds]; 

NSPredicate “orPrerf ** [NSCcunpoundPredicate 
orPredicateWithSubpredicatea:preds]: 

You can even comjxmnti existing compound predicates, 
which well do in ihLs last method. 

MTCDlltilities.in - 

objecLsForEntityNamedmiatchiiigKeysAndValiicsimingOR; 

iiiContext 

Finds all irLstanccs of a given entity based on an NSDictionary of 
key/value ]>airs/[ he key-value pairs will be turned into equality 
predicates and compounded using either OR or AN13 depending on the 
v;ilue i}f us&OR. 

+fNSArray *)objecrrForRniityNamed;(NSStrlng ')name 
m^^tchlngKeysAndVsl ues! (NSDictionary ')keyValues 
uf3lngOR: (BOOL) ujtcOR 

iuContext:(NSManugedObjeetComexl 'jeontext 

[ 

// We 11 retrieve an enumerator of all the kej's in the dieiionarv* 
NSKnimienitor *c ^ | key Values keyEnumenrUJrl; 

// Dixlare the predicate outside of the enumenuor loop 

NSPredicate 'prod = nil: 

// Declare.' a .string lo hold the current key while kn^ping 

NSSi ring 'key: 

while (key = fc nextObjeetj) 
j 

// Dcclare^ a formal string for creating the curre^nt subpre-dicate 
NNString 'predString “ 

[MSString strlngWitbForma 1 =- TO", keyj : 

// First time tlirough, pred is ni 1 amt shouldn't be compounded 
with anything 

if (pred = jill) 

pred ^ [NSPredicate predlcateWithFormat:predString, 
[kcyValues objecrFotKeyikeyJ]: 

else 

I 

// if pred is mn nil, then create a compound based on the new 
//siibprcdicatc t<*TTipPred and the cxisiirig predicate pred 

NSPredicate 'tempPred ^ [NSPredicate 
predicateWitbForiiae: predStri ng, 

[keyValues objectForKey;key]]; 

KSArray 'array - [NSArray 
arrayWithObjertsitempPred. 
pred, ailj: 
if (useOR) 


64 November • 2005 


vmw.MAcnra.coM 




pred * [NSCompoundpredicate 

orl'redicateWithSubpredlcates^array! ; 

else 

pred [f^SCompoundPredicatc a 

ndPtedicateWlthSubpredicates:array!^ 

\ 

} 


// Hvcnihiii^ from here should ksok famiHar 

NSEntltyDeBCuiptiOTi ‘entity = [HSEntityDescrlption 
ervtityPorName : name inWanagedObjectCoriLoxt^context] : 
NSFetchHequeal ^req ^ [ [NSFctchRequest alloc] init]: 
treq setEiitlty:entityj ; 
freq setPredicaLG:pradl; 

NSErrer *etror = tH 1: 

NSAt ray ‘array " [conText executeFctcbRequest:req 
error:terror]: 
if (array ” all) 

NSExceptlon 'exception - [NSException 
except ionW i t hNarne :MTCoreDa i aKxeption 
reason; [error IncallzedDescfiptloTi] 
uaetIufo:nil]; 
lexcDptien raise]j 
I 

[req release !i 
return array: 


To use this List nit'iliotL ;>imply pack a dictionary wiih the 
allnl)ules as the keys and the values ia compare them to as the 
values, like so; 

NSDictlonary ‘diet * [NSlUct Ionary 

dictlonaryWi i hObjectsAndKeya :&*‘BookCo" , publisher , 
[NSNumber niifflbcrWithInt:4dti/69l . @"salesRank" . nil! I 
NSArr;iy ‘array ” [MTCDIJtilities objertsForEntityNamed i 
©"Rook” matchingKeyBAndValues:dict usingOR;YES 
iiiContext; [self managedObjectConLcKLl 1 i 


Conclusion 


Tills artide gives you the l:Lst missing nwjor builtling blotk 
for creating Core Data appliiiatioiis. Between this article and its 
two predecessors, you should now fee! coiiifortabie creating a 
Cxire Data data model, hooking it into your interface, interacting 
with it prograinmatically, and finding data within your 
application's context. 

Core Data may seem a little iniiinidating at first, especially 
if you’ve never worked with an object-relational mapping tool 
such as KOF or Cayenne iK'fore. Hopefully tlie.se three aiticles 
have given you enough information to realize that Core Data 
really isn't .scary at all, but that it can give you a frightening 
increa,ses in your prcxluctiviiy. 
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MAC IN THE SHELL * by Edward Marczak 


Baoc to bash Basics: Part 2 


1 

riME TO Advanct Ourselves 

M M M ith any exercise, you need to continually push yourself. 

Without that extra effort, what once was a challenge 
" • becomes easy, something to drift through. At the same 
time, you may be missing advanced techniques that make other areas 
easier or more efficient. Similarly, shell scripting can go many layers 
deep, and you can exercise your knowledge in many ways. Last 
month in, “Back to bash Basics Part 1,” we focused on flow control. 

You may have noticed some of the things 1 didn’t cover explicitly. 
There’s always more to learn! Let’s tie up those loose ends. 




More Looping 


Since we disciks.sed looping canstrircts so much 
last monih, that's where well pick up. In the 
select example, you'll see a break staiement - 
that could use some explanation, break simply 
terminates the current loop, If it were removed from 
the select example, you would be asked 
repeatedly which file you want to inspect. Lel‘s see 
whai that would k>ok like: 

/bin/bash 

select theirem; tly 

if [ $thelteiii |; tlien 
file $thcltein 
fi 

done 

When this is run. the output looks like thiE: 

Jack*Ket:oujik;"-/bln marczakS ,/st.sh * 

1) BidToJob.dro& 

2) bontcheck.eh 

3) cl. L jct 
treatedmg 

5) diskrep.sh 

6) exscript 
3 


cl.txt: ASCII text 
#? A 

creatcding: ASCII text 

5 

diskrep.shr Bourne Again shell script text executable 
#? *C 


Notice that tliis time, we need to pre.ss ctrl-c to stO]i llie prognim, 
break applies to any l<K)p: 

/bin/bash 
for i in $*; 
do 

If I ! -0 $i h then 

echo You do not own $i! T m outta here! 
break 
fi 

echo $1 ifi your file! 

done 


Running as me. I'm shown: 
$ ./bt.ah * 

flidToJcib,dnig is your fllel 
boacheck.fih is your filel 
bt.sh is your file! 
ctL.txi is your file! 

Uclipped for brevity] 
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Running in ihat mm directf^ry a*s rcxit gives as: 

(i ./bt.sh ‘ 

You do not uwn BldToJob>dmgl 1 am outta here] 

AOT {or, how the shell will 
separate files) 

Have you ever crossed your AOT (Acronym Overioad 
Tliresliold)? "There's a problem wiili the RIP!" RasJer Image 
Processor, or Routing Infbrmaiion Protocol? Wfiile there's only 
so many TLAs ('Hiree Uiter Acronyms) ihat you ran deal wiih. 1 
need you add one more: IP'S (no, noi Itenitive PTactal Systeinsf). 
The shell uses the Internal Field Se[>arator to ck?termine how to 
break apart tokens, and how to separate tnt'oming parameters, 
liy default, IPS is equal to space, tab and newline. 

When we discussed the for loop last moniii, several tilings 
were tjuickly touched upcm that am Ix^ expanded. In addition 
to the $@ v;mable, wliich expands io individual double-<]uoted 
strings, there is the $* variable, w^hich is a single string 
containing each positional parameter. How do you know where 
each parameter breaks? $ ’ separatees eaefi parameter by using 
the first character of your IPS varial>le. Well gel back to how 
this can lx very useful 

Also, last month showed an example that Icxiked something 
like this; 

Fn.KS='ls Vfih' 

for 1 In SFILES 
do 

done 

This example ‘just works’ because Is *,sh will scfwate its 
output with linefeeds. Hey, tliats erne of the clmraeters in IFS 
l>y default! What gocxl fortune! 'I'his same example will fall 
apart if you reassign the IPS variable prior to the Ifxjp: 

TFS="-" 

for 1 in SFILES; do 
done 

$i will still hoki $ FILES, but it won't be tokenized - nta the way 
you'd expect (the line feeds will still lx in there, l>ut $i won't 
break on lliem). 

So, then, why would we ever touch IFS? Well, what if you 
wanted to seareli through something that Is mH broken up b>^ a 
space, newline or tab? Like SPATIl, for instance: 

(ft /bln/bash 
IPS-; 

for theDir in $FATU 
do 

tbeLatest^^ls lotr $theDir [ tall a 


echo Newest file In $theDir: 

echo StheLatest 

echo 

done 

Ihis simply gtxs through nur $PATI I and tells us the newest 
File in each directory* Could lx useful. 

Oh, and another thing 

f.ike Apple, shell H^ri|>ting always seems to have “one more 
thing." For this mondi, this iliing comes in the tf>nn of Ixing 
able to efteciively handle pant meters. Time to introduce shift 
and gntopts. 

When writing a script, parametens can be accessed a few 
ways. If you alwiiys rely on direct access ($1, $2,..etc), you run 
into sr>mc limits. One way to simply loop ihrougli all parameters 
Ls to use shift, shift makes $1 - S2, S2 = S3-etc. You kxse 
die first value that was assignetl to $L To look for a few specific 
parameters, you can lcx>p througit the values: 

if I /bin/bash 

while [ echo Si | grep “'*** J ; do 
case $1 in 

a ) echo “You supplied the -a flag”:; 

-b ) echo “You supplied the -b flag”:: 

-c ) echo “You Euppliad the -c flag":; 

* ) echo "Uaage: $0 -a -b c“; 
exit i:: 

esac 

shift 

dune 


Run Liiis code and y<Hj1l see: 

$ ,/flhifttefit*sh -b a 
You supplied the -b flag 
You supplied the -a flag 

Now', shift is cool, and still comes in handy, but to truly 
handle commanddine options smoothlVi we liave to empkiy 
get opts. Sure, you can roll your own each time, however, 
[xople have c^jine to expect tlicir optioas ro beliave in certain 
w^ays. One should he able to combine options, as with tar, for 
example: tar ^xzvf blah, tar- gz. Basically, you don’t 
need to roil yom own Ixcause get opts exists, 

get opts allows you to liandle options in a standard way. 
Seeing it in action Ls the quickest way to get up to speed: 

#l/bifi/bssh 

while getoptB ”:xyz:t'' theOptlon; do 
case StheOption in 

X ) echo “Option X choeen”:: 
y ) oeho “Optloti $theOptloo chosen**:: 
ji ) echo **0ptlon k chosen with argument: 

$0PTAKC";: 

t ) echo "Option t chosen**;; 

\? ) echo "Unknown option chosen" 
exit 1:; 

* ) echo **YoU need to supply an option!** 
exit 2;: 

esac 

done 
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gctopLs is designed to l)e dumped in a lotjp ilial will feed 
il argumenls passed into the script. It accepts a string that 
defines the allowed options, followed (ly a variable that will 
lK)ld the current option, sans the or **+'* (nicely, either are 
allowed). Using geLopts will define two variables: $OPTIND, 
Ifie current index and SOPTARG, the i'urrent argument passed 
witli an option. Running this produces this output: 

$ ./gatest.sh -yx2 teat 
Option y chosen 
Option X chosen 

Option z chosen with argument! test 

llie Siring that get opts accepts can only contain letters and 
the colon character. F.ach letter is an <3ption you wish to 
supfK>rt. If a letter is followed by a colon, that tells get opts 
that an argument Is required. By having a lead ctjlon chameter 
in the parameter list siring, you suj)press the error message tliat 
get opts will print if an option is not retx)gni2ed. In cither 
case, an unrecognixed option will set the vanal))e to so you 
am deal with it. 

Put it all Together 

I've gotten a rer[iiest or two asking how to deal witli math 
in the shell While tliere are specialized CLI apps that will deal 
wiiii ariilimeiic, the sltell can do some basic functions, and 
sometimes, that's all you need. Hie trick is the unilcnised 
declare statement, declare tells the shell how you want to 
treat varialiles, which are strings by default. So, this doesn't do 
what one would ex(>ect: 

S number1“7 
^ nuaber2*'8 

S totat-numberI'number2 


Wlien you echo $ total, you get "numlx;rrnumber2'’: strings. 
We need to tell the shell that ^totai should Ix" treaicxl as an integer: 

$ declare 1 total 
S total=nuiiiberl*nuiiber2 
S echo Stotal 
56 

Much better! declare can define several different ty[ics of 
variables: 

variable is an army 
”i mtiii as integer 

-r makes variable read-only 

-X autoimtic export (like the ‘expoff built-in) 

lliere are ,some others, liut tliis Is all we need conccnirare on for 
now. All of the usual stisfiects are availalile as miitiiematic opc‘nitors: 

+ Addition 

Subtraction 
* Miiiiiply 

/ Divide 

% Remainder 


« Bit-sliift left 

» Bit-shift right 

Bitwise and 
1 Bitwise or 

Bitwise not 
I Binvise not 

A Xor 

In addition to declare-ing a variable to be an integer, you can 
use let to make the as,signmenr: 

let theTatal-'5 ‘ 7^ 

All, let..,.brings me hack to my €64 BASIC tkiys,,. 

Now, you should be alile to write fairly sopliisticated shell 
script that iiicludc's slick input pnxessing, good en'or handling 
and even some basic ctjjiiputations! 

Make Yourself Useful... 

,,io everyone. Just rcmemlxT that bash scripting will help 
you not only with OS X, but with Linux, IRFX, FreeBSD, and 
even Windows - if you install a Unix shell there (whicli can be 
liad for free from Cygwin or Microsoft). 

This month highlights llie fact that shell scripting Is 
relatively eas}\ can lx* fun and pomr/ui, Fven Ixiier, you'll 
i'incl liasli built-in to evt^ry OS X machine you touch! Let this alt 
sink in: w'hiie I'll get Itack to hash scripting in future columns, 
more Unix detours next month! 




About The Author 



Id Marezak keeps if simple. Tech simpUdfy at 
http://www.radiatope.com 




Get MacTech delivered to 
your door at a price FAR 
BtHLOW the newstand price 
And, it's RISK FRE^! 


5tore.mactech.com/riskfree 


68 


November • 2005 


WWW.MACTKH.COW 













bette 


aN^gerae rtgtfiAeiiMi^iinh UDWOniirfkiriggrlcasI 


Toll Free: (800) 895-3493 Outside US/Canada: 805-494-9797 Fax: 805-494-9798 




[33 

'ii^ 










A d vert her/Product Index 


A -l Qualfty Products, fnc. ... 


Andescotio ILC * Andescotia .. ..... 

... ......„..J2 

Aladdin KnoMge Systems, Inc .. 

. 

. IFC 

( tree flus • FoirCom (orporation ... 

.../ 

Allume Systems, Inc . 

. IBC 

Cache ■ IntecSystems Corporotion. ..... 

. SC 

Andescotia U.C ............ ***. .. 

72 

Capture Works * Gl ilQH/CoptureWarks 

. . J3 

BetterJtam, com ............. 

. 42 69 

DeBobeliier * Ftjuilihrmm Jerhnoingies ., 

.... 4 

Brad Sniderman . 

. 57 

DevDepot • DevDepot . 

. 15 

Data Banks Communicathns . 

. 2 

Digital Rights Management * Aladdin Knowledge Systems, /nr.... 

. IFC 

DevDepot . . 

. 58-59 

Harmon Multimedia • Harmon Muftimedio . 

. 19 

DevDepot. . 

. 15 

iKeyChoin "A-J Quality Products, Inc...... ........ 

.... 47 

Equilibrium Jecbnologies .. 

4 

InstallerMaker, Stuffit •Jdlume Systems . 

... ISC 

fairCom Corporation .... 


Internet Marketing Services * ShorpHFT Scduthns, IHC. .. 


GiiMac Accessories LLC.. ________ 

.... 31 

Kerio Moil Server • Kerio Technologies, lac .. 

__ 

... 49 

CL DON/Capture Works ..... 

. t3 

Law Offices • Brad Sniderman.. . ..... 

.....j7 

Harmon Multimedia ... 

. J9 

tong Distonce Phone Service ■ Dtilitie54Less.com . 


tDG World Fxpo forporatian 

. 27 

MacDheciory Magazine • MacDireciory .. . ... 

... 

... 37 

IGC/MaxEMail.cm. . 

. ,43 

MacResoufce Computers • MocResource Computers .. 

.// 

InterSystems Corporation ... 

.. BC 

MocTech Magazine • Domains .... 

.. 63 

Kerio Technologies, lac ___ 

. 49 

MocTech Magazine • MocTech Magazine __ 

.. 55 

MacDirertory. . . ... .. 

V 

MocTech Magazine • Reseller ......... 

... JJ 

MarBesoufre Canipiitm .,,,,,,,,, 

. U 

MocWortd Expo * IDG World Expo Corporation . 

....... 27 

MacTecb Domains . .. . 

. 53 

MaxEMaiUom • IG(/MaxEMoil.com . 

. 43 

MocTech Magazine .... 

. . 55 

Maximizing Your Mac! * DevDepot .... 

. 5B-59 

MocTech Reseller ... 


OpenBase • OpenBase Internothnal, Ud. ... 

.......25 

mmit[,im. .. .. 

. 

. 47 

Peocbpil Press • Peachpit Press .. 

4S 

OpenBase International, ltd. ... 

.. 25 

PhonePipe * Tellurium Communications ... 

35 

Paradigmo Software .... 

.. 41 

Ram • BetterRom.cm .......... 

_ 42,69 

Peachpit Press ............ 

... ^45 

Screen Protection • Protective Solutions, Inc.. ... 

... 4/ 

Proteciive Solutions, Inc .. 

47 

SmollDog Electronics^ Small Dog . 

.. 21 

Seapine Software, Inc ....... 

71 

SpiderWorks ehot^s * SpiderWorks 

33 

SharpNFT Solutions, Inc. .. 

. 51 

Tett Jrnrk Pro • Seapine Snftmtre Inr 


Small Dog Electronics ... 

. 2} 

MVae-MARWAIlEJnc. .. 

__ 

... 47 

SpiderWorks .. 

. 33 

Valentina • Paradigmo Software 

41 

Tellurium Communications _ __ 

_ 3S 

VoIP • Data Banks Cammuakathm . . . 

2 

Ut$ties4Less.com .. 

... 65 

XfOckPro * GiiMoc Accessories U.C .. 



Tbe index on this page is provided os a service to our readers* The publisher does not assume any liobility for errors or omissions* 


70 November • 2005 


WWW.MACTt0H.COM 








































































































Complete Sourte Control ^Seapine Software 

g cfmtigitig ths world 

of tojtwdr^ dvi eiofimtnt 

anti Defett Mauagemeut 

tor Mar OS X 



fjXpmt Nt"- 
i!hp 


UtrU^»OI W It M 
B)rJ7.-Wai H It HI P4l 
Biimmi t» If «* iimrii, 
Qinmooi m if mi «>fFTiTfi 
Wi If I'M 4ijpn 
01/17//»f PB It Ht JAMH 
OiliOiOOi H It Hf 
Dl If m 
Pi If m »*mm 

Oifirnmi D6 if ni 
fli/lf/WI Pt II nt J 4 tniii 
01/170091 0 * If fW iAnp> 
oiarjawl M If Hi A*n« 


^ 0 ««i'iii 4 W/||^|ICfelpri»Mt|kl 4 ! 


bn] aixm Vif^ 


[W*ti iyamMii4M 


nwH mIv itilmp, w« mild Mriirfm* du domali 


Effective source code control and defect tracking require powerful/ 
flexible/and easy-to-use tools—Surround SCM andTestTrack Pro 


• Complete source code controi with private 
workspaces, automatic merging, role-based 
security, and more 

■ Comprehensive defect management — track 
bug reports and change requests, define 
workflow, customize fields 

' Fast and secure remote access to your source 
flies and defects —work from anywhere 

• Advanced branching simplifies managing 
multiple versions of your products 


• Link code changes with defects and change 
requests—know who changed what, when, 
and why 

* Scalable and reliable cross-platform, 
client/server solutions support Mac OS X, 
Windows, Linux, and Solaris 

• Exchange data using XML and ODBC, extend 
and automate with SOAP support 

* Licenses priced to fit your budget 


Seapine Software Product Lifecycle Management 
Award winning, easy-to-use software development tools 


SL^flpiiic 

Surround SOU 


Seapine 

TestTrock 

PRO 



I3th flnnLiJii 
r ppaduct 

''y[ -,..ex«p^rijcia. 


Oil pfoduefnim IW hsmin m registered riiidsmoiks of their respective ovniefs, AB ngirt^ reserved. 


Download Surround SCM 
and TestTrack Pro at 
www.seapinexom 
or call 1 888-683-6456 































Tips & Tidbits 


Hints That Make Your Mac Fly 


Welcome to the new Tips & Tidbits! 

This new column is your tjpportiinity to spread the word about little bius t>f infonuation that you know or fmd out alxmt. Tliese tidbits 
can address any type of useful infonnaiion: from user tips to networking to admin to programming. 

When the lips you submit are printed in die magas^ine, MacTct^h will send you a covered r-shin, just for MacTech tipsters. ThLs is the 
only way to get these shirts, and show that you kntw your stuff. 

To submit a tip, go to the MacTech web site at !illpi//www,mactechxoni/lips 
Spread the word alxiut things you know that othei^s could ixrnefit from knowing! 


Making The Invisible. Files Visible 

Are yt)u on a Mac OS X Server machine, and yt)u want to 
able to see all tlie hies all the time? Maylie your the admin 
for the machine, and you are sick of having to firing up the Find 
windtiw and kxiking for the invisible files that way. 

lliere is a selling in the Finder sellings that will allow y<ni 
to shim all the files. To do this, simply pull up your ferniinal 
app on the machine in quesliun, type in: 

defatiltfl write eym,apple,finder AppleShowAilFiles YES 

j:>ress return, ami then either log in/out, or lesUrt the t'omputcr. 
After liiat, all files on that machine will l>e visible. 

'Fo undo diis, do ilie reverse. 

faults write com,appl®,finder AppIeShowAllFlles NO 

Neil Tffkt'm 


Mac os X Server Admin AFP Access 

Are you looking to sei up AFP access for the administrator 
on your Mac OS X Server machine that allows you to see the 
entire drive on the machine mnning Mac OS X Server? 

The default setup for a user allows you to see three 
stibvoluines — Gmups, Users, and Public. If you w^ant to 
administer the wel) site.s folders, or even things at the root level 
of the drive, you have to give yourself additional privledges. 

The easiest way to do this hr the adminisiraior is through 
the Terminal app. Just type in: 

eudo serveradmin EattltiEs afpratlminllGetsSp " no 

'flianks to Dean Sliavit ul Mac'workshops.com for the 
background on iliis. 

Neil ricktin 




Draw code 

You know you want to 


_u_ 

[ obje instance/New ] 


alloc 


/Get Class Name ] 

i ,_, 

( objcJookUpClass ) ( seLgetVid ] 

— „ — 


• Edk while you run • One click Cocoa and Carbon application creation • Powerful debugger 
www.andescotia.coni 




































Multiple Formats. 
Multiple Platforms. 
Complex Installers. 
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We have the solution: 

Stuffi t Engine SDK _ 

Solving the compression & multi-platform puzzle! 

w ww.stuffit.com /sd k/ 


Licenses 
start as low 
as $99/Yr. 


Put the power of Stuffit to work for you. 

■ Adds value to your applications by 
integrating compression and encryption tools. 

■ The only tool that supports the Stuffit file format. 

■ Make self extracting archives for Macintosh 
or Windows 


4 

Mac 



■ Available for Macintosh, Windows, Linux or Solaris 


soians 


Stuffit InstallerMaker _ 

An OS X native version ready for developers! 

ww w.stuffit.com/i nsta I lermaker/ 

Give your software a solid beginning 

■ Create Macintosh OS X and Macintosh Classic 
compatible installers 

■ Get all the tools you need to install, uninstall or update 
your software in one complete package 


Prices 
start at 
$250 I 


■ Add muscle to your installers by customizing your electric 
registration form to include surveys and special offers. 


2004 Allume Systems^ Inc. Stuffit, Stuffit tnstallermaker arid Stuffit Engine SDK are trademarks or registered 
trademarks of Allume Systems, Inc.The AMume logo is a registered trademark of Allume Systems. All other 
products are trademarks or registered trademarks of their respective holders. All rights reserved. 


Allume 

wXSystems 

www.allume.cofn 
email: d€V.sales#a! tume.com 







































Innovations by InterSystems 


Database For Web-Based Applications. 


higlmiing ipttd with a multidimenmm/ 


Massive sca/ah/itr m mimmal hardware 


Rapid development with robust objects 


Easy database administration 


Cyclic, the multidimcnsionAi database from InterSystems, can automatically project data 
and logic in a number of Wcb-centric forms, such as XML, Web Services, Java, and EfB. 

These unique capabilities make Cache ideal for mptdly developing Web-based applications. 

(Jachc is the first database to seamlessly combine robust objects and robust SQL, thus 
eliminating objcct-relanonal mapping. Its po.sr-relational technology' delivers lightning-fast 
transaction pnKcssing, real-time analytics, and massive scalability on minimal hardware. Tr 
requires liulc administration, and incorporarc.s a rapid application development environment. 

These innovations mean faster time-to-market, lower cost of operations, and higher 
application performance. We back these claims with tins nKrney^-back guarantee: Buy Cache for 
new application devehpmmty and for up m one year you can return the license for a full refund if 
you are unhappy for any reasonC Cache is available for Unix, Linux, Windows, Mac OS X, and 
Open VMS - and it's deployed on mtjre than 100,000 systems ranging from two to over 
50,000 users. We are InterSystems, a global software company with a track reci>rd of 
innovation for more than 25 years. 


InterSystems ^ 

CACHE 

1Vy an innovative damhasc for free; Download a ftiUy funedoiial, non-expiring top)’ of Cache, or request it on CD, at wwTv.IntefSysicms.com/Cachcl IHH 

' Ikjit flpHt dPili iwrwr tKHi IT ihr sIkIwH 

O htirfSpinii* Cmpof mhbi AJI lijJiti fEicpfcJ (wpSyunni (jtlrf ■ * IraJcmirk iif (nwrSfprmi f IBS CuJwliimvl 1 MiR 









